Analysis

  • max time kernel
    255s
  • max time network
    359s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2023, 20:56

General

  • Target

    rk606138.exe

  • Size

    340KB

  • MD5

    89359ea28aaf2239d354729bd100e3fd

  • SHA1

    86b12b2e06155b20697882b37fb207ae8ae37a2d

  • SHA256

    393c613e68789906d5b11588508584201450663cdea428fc67b712b7245bb959

  • SHA512

    f33985b0ca3595d09b56d5a95e1943eceb6a05e5f41c452e82268171e97e3cef1af1d321d846b319961aaf561d96a160de8496570283258f8c433fc2f1415ce4

  • SSDEEP

    6144:GXZfAxwBD1PNeLCkuBWN6uv+KZ9jvAVzx1cTbGKAUqW+gOG32:GXZfAxYvYC7WN6FN18bGKAA+

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\rk606138.exe
    "C:\Users\Admin\AppData\Local\Temp\rk606138.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:672

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/672-55-0x0000000000220000-0x0000000000266000-memory.dmp

          Filesize

          280KB

        • memory/672-56-0x0000000002FB0000-0x0000000002FEC000-memory.dmp

          Filesize

          240KB

        • memory/672-57-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-58-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-59-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-60-0x0000000004510000-0x000000000454A000-memory.dmp

          Filesize

          232KB

        • memory/672-61-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-62-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-64-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-66-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-68-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-70-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-72-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-76-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-74-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-78-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-82-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-80-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-84-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-86-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-90-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-88-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-94-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-92-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-96-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-98-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-102-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-100-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-106-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-104-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-110-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-112-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-114-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-108-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-118-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-116-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-122-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-120-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-124-0x0000000004510000-0x0000000004545000-memory.dmp

          Filesize

          212KB

        • memory/672-854-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-856-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-857-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-858-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB

        • memory/672-859-0x0000000004560000-0x00000000045A0000-memory.dmp

          Filesize

          256KB