Analysis

  • max time kernel
    91s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    04-12-2022 05:17

General

  • Target

    cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe

  • Size

    500KB

  • MD5

    192ce9bb062eeb94923a24b7e2e9fa9e

  • SHA1

    0f896cfad3591d811392dbeb02e58eeddf2ea4fc

  • SHA256

    cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001

  • SHA512

    bea94ad4964443a3064d6b23125c8ea158694407df8b9487e60d7fb88d813cebeaa51ff69ab981471f9fd08dc73a39ae69409a45b9f7add08770640072eecc4b

  • SSDEEP

    12288:ilhUsb2Melpc9Zwmp6Iy8M4301Z1PP1JOuvEdd4:iLUNYWu698RyvjOks

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe
    "C:\Users\Admin\AppData\Local\Temp\cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1192-54-0x0000000000200000-0x0000000000284000-memory.dmp

    Filesize

    528KB

  • memory/1192-55-0x0000000001E20000-0x0000000001ED2000-memory.dmp

    Filesize

    712KB

  • memory/1192-56-0x00000000005F0000-0x0000000000646000-memory.dmp

    Filesize

    344KB

  • memory/1192-57-0x000000001A5C0000-0x000000001A614000-memory.dmp

    Filesize

    336KB

  • memory/1192-58-0x000000001A8C0000-0x000000001A90C000-memory.dmp

    Filesize

    304KB

  • memory/1192-59-0x000000001A910000-0x000000001A964000-memory.dmp

    Filesize

    336KB

  • memory/1192-60-0x000000001AE57000-0x000000001AE76000-memory.dmp

    Filesize

    124KB