Overview

overview

5

Static

static

b48194a2eb...3a.exe

windows7-x64

5

b48194a2eb...3a.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    120s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2022, 01:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b48194a2eb88f35c02a4a11761b06bd1dd6b65b1780df547ebb33644030b483a.exe

  • Size

    76KB

  • MD5

    58112314f17fc81cdfca438a05aa2aa7

  • SHA1

    879e6e11d5e831dadc2fd24723881a90c67a0ec2

  • SHA256

    b48194a2eb88f35c02a4a11761b06bd1dd6b65b1780df547ebb33644030b483a

  • SHA512

    111c79a68cc3899fe9474e683ab959f9554d90d64f9d31b396a0a23e54a95540fadce95e4e50a61062a88b1045cc54ba2389568fd1fd00bd50edd80223cec456

  • SSDEEP

    1536:eIsMY07X5WDRIK3e8QeCv42HSEpPNiSLBlxrEZ33j:G4ERIKFCHRPcS5rE

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b48194a2eb88f35c02a4a11761b06bd1dd6b65b1780df547ebb33644030b483a.exe
    "C:\Users\Admin\AppData\Local\Temp\b48194a2eb88f35c02a4a11761b06bd1dd6b65b1780df547ebb33644030b483a.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1488-54-0x0000000075FF1000-0x0000000075FF3000-memory.dmp

          Filesize

          8KB

          Download