Overview

overview

10

Static

static

1

gunzipped.exe

windows7-x64

1

gunzipped.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2023, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    gunzipped.exe
  • Size 66KB
  • Sample230227-2c3s6agb39
  • SHA256 06bc0ddc2a415ea6a75ffe353dedbf8b61f9a1c85cfce309fc3de656473edc5c
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\gunzipped.exe
    "C:\Users\Admin\AppData\Local\Temp\gunzipped.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cab435A.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\Cab435A.tmp
        • Size 61KB
        • SHA256 10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Tar4418.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\Tar4418.tmp
        • Size 161KB
        • SHA256 c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/1240-54-0x0000000000920000-0x0000000000936000-memory.dmp
        Download

        memory/1240-55-0x0000000004D30000-0x0000000004D70000-memory.dmp
        Download