Overview

overview

10

Static

static

10

1580078786...07.exe

windows7-x64

1

1580078786...07.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-06-2023 01:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    15800787860c1e735ad6b5f2a1b0915b1e3dc1b63264eb5c8af4a1386d5a2e07.exe

  • Size

    32KB

  • MD5

    144fc1ec9c05433ae3a5e9d6543f1cbf

  • SHA1

    2a2c04871b40ab7d51edf23911a3d6f16698efef

  • SHA256

    15800787860c1e735ad6b5f2a1b0915b1e3dc1b63264eb5c8af4a1386d5a2e07

  • SHA512

    70162e242ee550d6ba04f10d782c7e97660feb81f199971b9770c6811a954c6aeb93aa8f9256cb1d236e0d9ddc580d86859c77a0e019e911188fbf5fd7e6f614

  • SSDEEP

    384:n0bUe5XB4e0XmOnPw0Q0mS03AWTxtTUFQqzFcObbZ:sT9Bu1I55dWbZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 37 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15800787860c1e735ad6b5f2a1b0915b1e3dc1b63264eb5c8af4a1386d5a2e07.exe
    "C:\Users\Admin\AppData\Local\Temp\15800787860c1e735ad6b5f2a1b0915b1e3dc1b63264eb5c8af4a1386d5a2e07.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1560-133-0x0000000001430000-0x0000000001440000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1560-134-0x0000000001430000-0x0000000001440000-memory.dmp
    Filesize

    64KB

    Download