Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2023, 20:47

General

  • Target

    kp242852.exe

  • Size

    340KB

  • MD5

    57bb5bfe83c9272884f5a377b5b65f54

  • SHA1

    2b9afbd2f74fa583f4a3987a93ed6fea9b5b31b8

  • SHA256

    b421398a14f07c8509dd167a0941e0e737a9006c8813028719a06bcd52b6082b

  • SHA512

    08a432539ccfe266522a3a8d485af078740197000883831dfaa31e9b9b0c0b9692dc69240228ca0dc90e163feae2de11ea67a4f7339126c70cf9a6ee40b4f85f

  • SSDEEP

    6144:tXZfAxwBD1PNeLCkuBWN6uv+KZ9jvAVzx1cTbGKAUqW+gOG32:tXZfAxYvYC7WN6FN18bGKAA+

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\kp242852.exe
    "C:\Users\Admin\AppData\Local\Temp\kp242852.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2012-55-0x0000000006E00000-0x0000000006E3C000-memory.dmp

    Filesize

    240KB

  • memory/2012-56-0x0000000006E40000-0x0000000006E7A000-memory.dmp

    Filesize

    232KB

  • memory/2012-57-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-58-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-60-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-62-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-64-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-66-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-70-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-68-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-74-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-72-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-76-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-78-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-80-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-84-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-82-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-86-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-88-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-92-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-90-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-94-0x0000000000270000-0x00000000002B6000-memory.dmp

    Filesize

    280KB

  • memory/2012-95-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-96-0x0000000006ED0000-0x0000000006F10000-memory.dmp

    Filesize

    256KB

  • memory/2012-98-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-102-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-100-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-106-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-108-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-104-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-112-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-110-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-114-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-118-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-116-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-122-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-120-0x0000000006E40000-0x0000000006E75000-memory.dmp

    Filesize

    212KB

  • memory/2012-851-0x0000000006ED0000-0x0000000006F10000-memory.dmp

    Filesize

    256KB

  • memory/2012-854-0x0000000006ED0000-0x0000000006F10000-memory.dmp

    Filesize

    256KB