Overview

overview

10

Static

static

10

xXJ5tCzlXPdY.exe

windows7-x64

1

xXJ5tCzlXPdY.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05-06-2023 19:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xXJ5tCzlXPdY.exe

  • Size

    32KB

  • MD5

    dfdf6e602a96160090c48334031a2574

  • SHA1

    1891fb4a8b6c3b2c8a25473f833cebea163113bb

  • SHA256

    257d66d9dc5b7e9cc863f241c2375e798634e1fd9e545f374fbd21535999ba13

  • SHA512

    56e30cac4a47c95e2ed416f0886a0157f34fdf1411fef975fdbd098c77efa7722e1b8628ff185e96f9a1a5750c937722d6e37553167639fd9344ed2670cf6ddd

  • SSDEEP

    384:20bUe5XB4e0XmOhmANuiEO0YaMWT7tTUFQqzFOObbL:XT9Bu1IguiEYgQbL

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 23 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xXJ5tCzlXPdY.exe
    "C:\Users\Admin\AppData\Local\Temp\xXJ5tCzlXPdY.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/836-54-0x0000000002300000-0x0000000002340000-memory.dmp
    Filesize

    256KB

    Download
  • memory/836-55-0x0000000002300000-0x0000000002340000-memory.dmp
    Filesize

    256KB

    Download