cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf

Analysis

max time kernel
32s
max time network
55s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 12:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe
Size

1.5MB
MD5

51278022bcac98d0d7299119fc27b1ee
SHA1

d08d56bc5e5422e08edeb35725d6bdd4ba5ef345
SHA256

cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf
SHA512

d053332fbc8a4166f72c302fbaa71749b898e8719f782f75ce5cbe21b109c413c7cb4758c8d3f6177a0d2f4ba6986f17762f213bccde432e9e1ad3385d154f55
SSDEEP

24576:0kbfuOCAl0oR4CbIW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJZq3IVxSI:0a2OC1U4PasY6DwOBfrnvV7UeWtbqGj

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
1004	cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe
1004	cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe
1004	cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1004	cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe

C:\Users\Admin\AppData\Local\Temp\cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe
"C:\Users\Admin\AppData\Local\Temp\cf3a711a7d237fb40f83c9a684443c05fe630aca9655cdfd71efacfb97caebaf.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
PID:1004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\sqma4a1f.2b0\7z.dll

Filesize
893KB

MD5
04ad4b80880b32c94be8d0886482c774

SHA1
344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

SHA256
a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

SHA512
3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

Download Submit
\Users\Admin\AppData\Local\Temp\sqma4a1f.2b0\7z.dll

Filesize
893KB

MD5
04ad4b80880b32c94be8d0886482c774

SHA1
344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

SHA256
a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

SHA512
3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

Download Submit
\Users\Admin\AppData\Local\Temp\sqma4a1f.2b0\7z.dll

Filesize
893KB

MD5
04ad4b80880b32c94be8d0886482c774

SHA1
344faf61c3eb76f4a2fb6452e83ed16c9cce73e0

SHA256
a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338

SHA512
3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

Download Submit
memory/1004-54-0x0000000075211000-0x0000000075213000-memory.dmp

Filesize
8KB

Download
memory/1004-55-0x00000000747E0000-0x0000000074D8B000-memory.dmp

Filesize
5.7MB

Download
memory/1004-59-0x0000000000287000-0x0000000000298000-memory.dmp

Filesize
68KB

Download
memory/1004-60-0x00000000747E0000-0x0000000074D8B000-memory.dmp

Filesize
5.7MB

Download
memory/1004-61-0x0000000000287000-0x0000000000298000-memory.dmp

Filesize
68KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads