Overview

overview

7

Static

static

1

download.zip

windows7-x64

1

download.zip

windows10-2004-x64

1

setup.exe

windows7-x64

7

setup.exe

windows10-2004-x64

7

setupapi.dll

windows7-x64

1

setupapi.dll

windows10-2004-x64

1

verifier.dll

windows7-x64

1

verifier.dll

windows10-2004-x64

1

version.dll

windows7-x64

1

version.dll

windows10-2004-x64

3

vulkan.dll

windows7-x64

3

vulkan.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    31s
  • max time network
    38s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    04-03-2023 20:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    download.zip

  • Size

    7.4MB

  • MD5

    5adf52c6391180f98b80beaf83341a8d

  • SHA1

    fd7a36d88dbab6e4c2f105a428c70e6787038e49

  • SHA256

    ab5268c60129d2e996824459f1837505c828184d08843dee542dc1e9a90db70a

  • SHA512

    65fdbf087d52b260b5422fc9cfe110afee4d5ba2c07feed412749e57a6f56b64f6f5ee9ee369f58f1d739c7cc347bdc751c0233ed9a0d77a9af7313881fd18e2

  • SSDEEP

    196608:wmkUojXf0/4i4M22TFZODkbRudGPZsFL8:wmojdVM2WsDk/CA

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\download.zip
    1⤵
      PID:1376
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2040
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x55c
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1880

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads