Overview

overview

1

Static

static

54628e3d49...42.exe

windows7-x64

1

54628e3d49...42.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2023 16:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    54628e3d4956efcbce04ebdd20eb5342.exe

  • Size

    18KB

  • MD5

    54628e3d4956efcbce04ebdd20eb5342

  • SHA1

    9cfbec77418ef8572619928e055331a62ea31eee

  • SHA256

    a51a7662d835e2db5159392b104f7e30cfa931341d3bf7c30d5667c7c2b3397f

  • SHA512

    796d014f8eedf2a056ada9ade04fdd0e147e199f9c01e7a11c15d5cf4f561be4da7fd12d859e17239d77919cf7162081be6f1015bb26227ab23adf8c9cf1eb7b

  • SSDEEP

    384:mR1O1HfA6c76wQ/J1O95acb43vK4oTb7VnwbN/4wy/jKXuQT:oY1YUBcfVneGrKXHT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54628e3d4956efcbce04ebdd20eb5342.exe
    "C:\Users\Admin\AppData\Local\Temp\54628e3d4956efcbce04ebdd20eb5342.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1752-54-0x0000000000A80000-0x0000000000A8A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/1752-55-0x0000000000930000-0x0000000000964000-memory.dmp

    Filesize

    208KB

    Download

  • memory/1752-56-0x00000000004C0000-0x00000000004CA000-memory.dmp

    Filesize

    40KB

    Download