Overview

overview

10

Static

static

PAYMENT_.exe

windows7-x64

10

PAYMENT_.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    308s
  • max time network
    359s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 12:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PAYMENT_.exe

  • Size

    1.1MB

  • MD5

    ab16019f6de46dc8df86535f8e32c6d3

  • SHA1

    701dd0536a0d551a2106bd77d54dd0279b45f6ae

  • SHA256

    6c5c691b8220592e29ed077baccc2b85fda2a851e96655aae685e5918becb087

  • SHA512

    8b7ae90b572249e130e7b131599d6b484dcab670b1db8fce651c744969a432d92eadda43962f968f91a9f157d0856033212b8978638aa9af85a471587dc93672

  • SSDEEP

    12288:PIcw1pNcax0F5+htb7lPwYzgmF4a1liyk5M5Aaec6UdYVmU/GZoNid79fV2CStc7:wLncax0CJria2EG+oDOwB

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PAYMENT_.exe
    "C:\Users\Admin\AppData\Local\Temp\PAYMENT_.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3484-132-0x0000000000F00000-0x000000000101C000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/3484-133-0x0000000008470000-0x0000000008A14000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/3484-134-0x0000000007FA0000-0x0000000008032000-memory.dmp
    Filesize

    584KB

    Download
  • memory/3484-135-0x00000000080E0000-0x000000000817C000-memory.dmp
    Filesize

    624KB

    Download
  • memory/3484-136-0x0000000007F90000-0x0000000007F9A000-memory.dmp
    Filesize

    40KB

    Download