Analysis

  • max time kernel
    153s
  • max time network
    179s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2023, 19:48

General

  • Target

    kp232100.exe

  • Size

    459KB

  • MD5

    4b27e573c9d63a0929c243d80ff035f0

  • SHA1

    945f8a0a959233ec26eef307b7600d83041d484a

  • SHA256

    048b6a1e8e6e5a162ee03ffebec10b4811f315b1655086eae04ace9efaebb5eb

  • SHA512

    9851a813c3e8dd09ecbf5264d7491e84baac1597e347d5c0c4d09b68cfcf83d42b25a526b794f096e42dc2f2a6031abd268109dcdd9913f23020f3aebfd6d33a

  • SSDEEP

    12288:W6ivt/yNFh9n/ZR/UCIk9zsBtLXO+DUt:WTvt/y9N/Dcy0LXJDM

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\kp232100.exe
    "C:\Users\Admin\AppData\Local\Temp\kp232100.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1256-55-0x0000000002380000-0x00000000023BC000-memory.dmp

    Filesize

    240KB

  • memory/1256-56-0x0000000002420000-0x000000000245A000-memory.dmp

    Filesize

    232KB

  • memory/1256-58-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-57-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-60-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-62-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-64-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-66-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-70-0x00000000002D0000-0x0000000000316000-memory.dmp

    Filesize

    280KB

  • memory/1256-72-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-71-0x0000000004D00000-0x0000000004D40000-memory.dmp

    Filesize

    256KB

  • memory/1256-73-0x0000000004D00000-0x0000000004D40000-memory.dmp

    Filesize

    256KB

  • memory/1256-68-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-77-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-81-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-85-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-91-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-95-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-101-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-105-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-111-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-115-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-121-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-123-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-119-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-117-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-113-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-109-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-107-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-103-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-99-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-97-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-93-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-89-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-87-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-83-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-79-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-75-0x0000000002420000-0x0000000002455000-memory.dmp

    Filesize

    212KB

  • memory/1256-853-0x0000000004D00000-0x0000000004D40000-memory.dmp

    Filesize

    256KB

  • memory/1256-858-0x0000000004D00000-0x0000000004D40000-memory.dmp

    Filesize

    256KB