Overview

overview

1

Static

static

a42d050998...06.exe

windows7-x64

1

a42d050998...06.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    231s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 06:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a42d05099890c9c377b69125f2ce02a9156f8dc0ecc9d9d5860af0593660f606.exe

  • Size

    215KB

  • MD5

    972cde68f19d34cafde6aa268c829ac0

  • SHA1

    ea70552e7d42bbd8e6c553d3bc06d0db3e10764b

  • SHA256

    a42d05099890c9c377b69125f2ce02a9156f8dc0ecc9d9d5860af0593660f606

  • SHA512

    929c8d403cf458b42eb9fe026a7f629dd5defc202c508b316bd92766463f00541087d322d192e3081b22dd8bd98182d0c60af4cb9c5229579460ec593dd1d212

  • SSDEEP

    3072:MTRApTVtFuP9Rda9DUYGq2C9lr/ANP4w7qkl1R32dQ/oemzteDWc3C0nNTBf2J9J:sRApEXduUZC9hAFqsNKztLiNTB6D

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a42d05099890c9c377b69125f2ce02a9156f8dc0ecc9d9d5860af0593660f606.exe
    "C:\Users\Admin\AppData\Local\Temp\a42d05099890c9c377b69125f2ce02a9156f8dc0ecc9d9d5860af0593660f606.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1076-54-0x0000000076831000-0x0000000076833000-memory.dmp

    Filesize

    8KB

    Download