Analysis

  • max time kernel
    2s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 22:58

General

  • Target

    704535c8e59a437cf891149c7eb3609c0848b291ea329e6db413e0210e972943.exe

  • Size

    1.4MB

  • MD5

    677c644ad35c869fd7529d42f0db36f0

  • SHA1

    10d2d7151c4e99fb739f729ee2b83e60cda8cf3f

  • SHA256

    704535c8e59a437cf891149c7eb3609c0848b291ea329e6db413e0210e972943

  • SHA512

    126d60d6ca4f264efa74b00ce97590e76879730db6d60b323b99c1f0b596bd28fa2b64bcb2a65e6049c624ee245a53ad97013adf5a3b166a70ff71398657682a

  • SSDEEP

    24576:UjqAi2IL6HrIESfGA0hu6jZRVOk1yz5yR4G64X4eLAOXgbWPJEBxF:U2AijLBGA3EVx0moIaBxF

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\704535c8e59a437cf891149c7eb3609c0848b291ea329e6db413e0210e972943.exe
    "C:\Users\Admin\AppData\Local\Temp\704535c8e59a437cf891149c7eb3609c0848b291ea329e6db413e0210e972943.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1404-54-0x0000000075881000-0x0000000075883000-memory.dmp

          Filesize

          8KB