Overview

overview

10

Static

static

10

B498478906...B8.exe

windows7-x64

1

B498478906...B8.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    128s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2023 06:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    B498478906628FECB57CCD1D01AC7F85D21E6335B63B8.exe

  • Size

    126KB

  • MD5

    9a5b5d8a1ad102ee18e76e3aaba85f41

  • SHA1

    0ff682447df5d56776a4af931fbc7e8d76ab686a

  • SHA256

    b498478906628fecb57ccd1d01ac7f85d21e6335b63b81d4f3e5ec7666bbe211

  • SHA512

    eb7871e7ba0a0e40f4b17e3661d46e915fde63a5d1692fdd878246657f10e20608614bd87392354083748f809a6af8627666d72086f50c2ea48bc3235c3d963c

  • SSDEEP

    1536:+YcsdlmTsyBJ+TXZA9yxdVDEqdAipycFEyiGtWMGjx8j:+HsdlmTsyBsiybpUpc9TWrx8j

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\B498478906628FECB57CCD1D01AC7F85D21E6335B63B8.exe
    "C:\Users\Admin\AppData\Local\Temp\B498478906628FECB57CCD1D01AC7F85D21E6335B63B8.exe"
    1⤵
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:2040

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-54-0x000007FEF3EF0000-0x000007FEF4913000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2040-55-0x000007FEF2C10000-0x000007FEF3CA6000-memory.dmp
    Filesize

    16.6MB

    Download