Analysis

  • max time kernel
    313s
  • max time network
    318s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    04-12-2022 05:17

General

  • Target

    cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe

  • Size

    500KB

  • MD5

    192ce9bb062eeb94923a24b7e2e9fa9e

  • SHA1

    0f896cfad3591d811392dbeb02e58eeddf2ea4fc

  • SHA256

    cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001

  • SHA512

    bea94ad4964443a3064d6b23125c8ea158694407df8b9487e60d7fb88d813cebeaa51ff69ab981471f9fd08dc73a39ae69409a45b9f7add08770640072eecc4b

  • SSDEEP

    12288:ilhUsb2Melpc9Zwmp6Iy8M4301Z1PP1JOuvEdd4:iLUNYWu698RyvjOks

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe
    "C:\Users\Admin\AppData\Local\Temp\cf076054585d5ef503854ff79b76b333ab9808914f9c7aa8548144aafbd80001.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4872-116-0x0000000000520000-0x00000000005A4000-memory.dmp

    Filesize

    528KB

  • memory/4872-117-0x00000000026B0000-0x0000000002762000-memory.dmp

    Filesize

    712KB

  • memory/4872-118-0x000000001B050000-0x000000001B0A6000-memory.dmp

    Filesize

    344KB

  • memory/4872-119-0x000000001B0B0000-0x000000001B104000-memory.dmp

    Filesize

    336KB

  • memory/4872-120-0x000000001B170000-0x000000001B1BC000-memory.dmp

    Filesize

    304KB

  • memory/4872-121-0x000000001B7C0000-0x000000001B814000-memory.dmp

    Filesize

    336KB