Overview

overview

10

Static

static

8

233f95c87f...31.exe

windows7-x64

8

233f95c87f...31.exe

windows10-2004-x64

8

2d8ea1230d...aa.exe

windows7-x64

10

2d8ea1230d...aa.exe

windows10-2004-x64

10

34dba85bb2...1a.exe

windows7-x64

8

34dba85bb2...1a.exe

windows10-2004-x64

8

463d0b0903...ea.exe

windows7-x64

1

463d0b0903...ea.exe

windows10-2004-x64

1

4bcf45bde8...39.exe

windows7-x64

1

4bcf45bde8...39.exe

windows10-2004-x64

1

5292b8004f...ce.exe

windows7-x64

10

5292b8004f...ce.exe

windows10-2004-x64

10

6babc5b52d...53.dll

windows7-x64

1

6babc5b52d...53.dll

windows10-2004-x64

1

85b73b7b3c...45.exe

windows7-x64

10

85b73b7b3c...45.exe

windows10-2004-x64

10

8eb41b097a...ff.exe

windows7-x64

8

8eb41b097a...ff.exe

windows10-2004-x64

8

932380926b...ef.exe

windows7-x64

5

932380926b...ef.exe

windows10-2004-x64

8

9d8729b9ca...de.exe

windows7-x64

10

9d8729b9ca...de.exe

windows10-2004-x64

8

9e147a3bb2...53.dll

windows7-x64

1

9e147a3bb2...53.dll

windows10-2004-x64

1

bccfdc8e1a...96.exe

windows7-x64

7

bccfdc8e1a...96.exe

windows10-2004-x64

7

bf5a9bb619...d7.exe

windows7-x64

1

bf5a9bb619...d7.exe

windows10-2004-x64

1

d0017384df...0a.exe

windows7-x64

1

d0017384df...0a.exe

windows10-2004-x64

1

d72aa8fe30...89.exe

windows7-x64

10

d72aa8fe30...89.exe

windows10-2004-x64

10

Resubmissions

15-11-2024 18:05

241115-wpjcdsxrdy 10

11-11-2024 21:40

241111-1h6xbsxcql 10

03-12-2022 17:54

221203-wg4ncscc33 10

Analysis

  • max time kernel
    77s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 17:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d0017384df7b41aba785a35c92082d1460af89204cfae22e6173eaebe16b270a.exe

  • Size

    95.4MB

  • MD5

    6d08fd7ee7d279585077bff3b77c9cf1

  • SHA1

    09918a40856f17990378fcf280d3ce399d1bbdde

  • SHA256

    d0017384df7b41aba785a35c92082d1460af89204cfae22e6173eaebe16b270a

  • SHA512

    9673687f67aecefaeeb24104cea85632a89ca4533fe668a14a99cc05ff2fd0e399b8ff62c1716f933884bc160639ca9245fcfaf70dbc32cd8180e55808cf7e01

  • SSDEEP

    96:wCuMxH2gn9Qr393iMMQGjHJvVkOoEV35quW/2viMffthpl4WUl4hbFnU:wCNn9Y95MLkOoEVFNviMfftl2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0017384df7b41aba785a35c92082d1460af89204cfae22e6173eaebe16b270a.exe
    "C:\Users\Admin\AppData\Local\Temp\d0017384df7b41aba785a35c92082d1460af89204cfae22e6173eaebe16b270a.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2500-132-0x0000000000D00000-0x0000000000D08000-memory.dmp

    Filesize

    32KB

    Download

  • memory/2500-133-0x0000000005D50000-0x00000000062F4000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/2500-134-0x00000000056B0000-0x0000000005742000-memory.dmp

    Filesize

    584KB

    Download

  • memory/2500-135-0x0000000005760000-0x000000000576A000-memory.dmp

    Filesize

    40KB

    Download