Analysis

  • max time kernel
    298s
  • max time network
    334s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-11-2022 14:32

General

  • Target

    bdc7fa90a1a4ae03e63fe914c7222cd7019d1b3cd0676fa5ee3f6f7c04416d7b.exe

  • Size

    8.7MB

  • MD5

    99da955426a8cfa74ac059a995a2a9a6

  • SHA1

    cc6d485ed25c1e25fad316c51a5529f0e646c68e

  • SHA256

    bdc7fa90a1a4ae03e63fe914c7222cd7019d1b3cd0676fa5ee3f6f7c04416d7b

  • SHA512

    e0a0430f929d71396c48ce3687652ebfac26490c17c5da091562804ecc4b023639548416bafffd2f2ab2ab00c1ecebcd8b7cad8a34c113f0031dc5cd14ddc67d

  • SSDEEP

    98304:LPzDGc/41Hm1mVCZhKNNX5jA8HynvsXmsXpwkeikcfCtX/rjCiGUJ7W7+iQI0gVO:Lao1j+/5kOyn02sXp8pcfkDjHhiz08O

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdc7fa90a1a4ae03e63fe914c7222cd7019d1b3cd0676fa5ee3f6f7c04416d7b.exe
    "C:\Users\Admin\AppData\Local\Temp\bdc7fa90a1a4ae03e63fe914c7222cd7019d1b3cd0676fa5ee3f6f7c04416d7b.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2876-132-0x00000000009D0000-0x0000000001282000-memory.dmp
    Filesize

    8.7MB

  • memory/2876-133-0x00000000062A0000-0x0000000006844000-memory.dmp
    Filesize

    5.6MB

  • memory/2876-134-0x0000000005C30000-0x0000000005CC2000-memory.dmp
    Filesize

    584KB

  • memory/2876-135-0x00000000060F0000-0x000000000618C000-memory.dmp
    Filesize

    624KB