8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85 | Triage

Analysis

max time kernel
68s
max time network
74s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
29/06/2023, 02:41

Sharing

Report Analysis Logs

General

Target

$r45eydm.zip
Size

22B
MD5

76cdb2bad9582d23c1f6f4d868218d6c
SHA1

b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA256

8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
SHA512

5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1316	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1316	AUDIODG.EXE
Token: 33	1316	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1316	AUDIODG.EXE

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\$r45eydm.zip
1⤵
PID:1300

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2000

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x57c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads