Analysis

  • max time kernel
    96s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 10:31

General

  • Target

    65594d2429406070b93f7da2be61f9ebc0164acd97a309de3b8bf743744c9023.exe

  • Size

    2.5MB

  • MD5

    47a8b1c08061485b03b9db5db4db3ba3

  • SHA1

    2248168ba1c474f4d5fdcea5ac43892540d840fc

  • SHA256

    65594d2429406070b93f7da2be61f9ebc0164acd97a309de3b8bf743744c9023

  • SHA512

    2535c80383c754511328be77b482a61b82f2f71bc22eb15b8b85c686d1059c2e2061e85fc53871470a81312c8e67613ade5ac7a563995fd444fe7a55619c167c

  • SSDEEP

    49152:ca8yZ+zWx0Rrb/TWvO90d7HjmAFd4A64nsfJUtPSXCvMp11Lgl08Iussfb1M8:L0Tr5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 28 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\65594d2429406070b93f7da2be61f9ebc0164acd97a309de3b8bf743744c9023.exe
    "C:\Users\Admin\AppData\Local\Temp\65594d2429406070b93f7da2be61f9ebc0164acd97a309de3b8bf743744c9023.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads