Overview

overview

10

Static

static

MSIAfterbu...a2.exe

windows7-x64

10

MSIAfterbu...a2.exe

windows10-2004-x64

1

Resubmissions

29-11-2022 20:16

221129-y15qwacd77 10

29-11-2022 20:12

221129-yy6v6afd5w 1

Analysis

  • max time kernel
    193s
  • max time network
    371s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 20:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MSIAfterburnerSetupBeta2.exe

  • Size

    714.9MB

  • MD5

    b96e44518470f01efabf712dd5ac9ac2

  • SHA1

    dbad6af5d84dc5829c2f3c6563876af9dbbe46ee

  • SHA256

    660c6ba304e5f6709b7e261a28469e5e7804e38ef61bda31a1ef647f11b6fe4b

  • SHA512

    4e09bc361a00eaa879f6104f84ea5348d78c87a3fc26092a1507193f77d641c62a371f32b004dea6f4f4f82df15c336ae2eee8bea56430e6147e82fdd9af5804

  • SSDEEP

    49152:FgAXu3MfR/d4+Mv4yOWee0n5ofbOclLN9l96J30GY6B7W6l6WYqaqfmpgIIy6r:FpSuS+zWV0SV97l9m0fWSIaqfMFIy

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetupBeta2.exe
    "C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetupBeta2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1152-132-0x0000000001000000-0x000000000102D000-memory.dmp
    Filesize

    180KB

    Download
  • memory/1152-133-0x00000000168F0000-0x0000000016F08000-memory.dmp
    Filesize

    6.1MB

    Download
  • memory/1152-134-0x0000000016F10000-0x000000001701A000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/1152-135-0x0000000016860000-0x0000000016872000-memory.dmp
    Filesize

    72KB

    Download
  • memory/1152-136-0x0000000000FA0000-0x0000000000FDC000-memory.dmp
    Filesize

    240KB

    Download