a615a2c647bce3b67f43c818a7fd972a653a605efce83b7eb6f38fb374ec8eba

Analysis

max time kernel
41s
max time network
31s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
30-06-2023 12:05

Target

full_min_cr.exe
Size

2.7MB
MD5

e7bf9f0c2c1977ddd8e139c13c27be0d
SHA1

e91aff3d9a8c7cef0e9543350864971e4ad93f82
SHA256

a615a2c647bce3b67f43c818a7fd972a653a605efce83b7eb6f38fb374ec8eba
SHA512

d9961824b178944aec2411c1bb29a5ef4b487ce0c251fe381e2841c6abe00f29ecf895ab1baf93e49442af07a14acdcf9d882519d39beb5c4d4902db2db2560f
SSDEEP

49152:552sxwTr/VsoJteujcnqNwelN/z52r7zj9n0cqv/3SYd:55jxa3JteujcncNNQzj9hqXCY

Score

1^/10

Suspicious behavior: EnumeratesProcesses 5 IoCs

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	828	full_min_cr.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 1688	828	full_min_cr.exe	28
PID 828 wrote to memory of 1688	828	full_min_cr.exe	28
PID 828 wrote to memory of 1688	828	full_min_cr.exe	28
PID 828 wrote to memory of 1688	828	full_min_cr.exe	28
PID 828 wrote to memory of 268	828	full_min_cr.exe	29
PID 828 wrote to memory of 268	828	full_min_cr.exe	29
PID 828 wrote to memory of 268	828	full_min_cr.exe	29
PID 828 wrote to memory of 268	828	full_min_cr.exe	29
PID 828 wrote to memory of 764	828	full_min_cr.exe	30
PID 828 wrote to memory of 764	828	full_min_cr.exe	30
PID 828 wrote to memory of 764	828	full_min_cr.exe	30
PID 828 wrote to memory of 764	828	full_min_cr.exe	30
PID 828 wrote to memory of 1316	828	full_min_cr.exe	31
PID 828 wrote to memory of 1316	828	full_min_cr.exe	31
PID 828 wrote to memory of 1316	828	full_min_cr.exe	31
PID 828 wrote to memory of 1316	828	full_min_cr.exe	31
PID 828 wrote to memory of 568	828	full_min_cr.exe	32
PID 828 wrote to memory of 568	828	full_min_cr.exe	32
PID 828 wrote to memory of 568	828	full_min_cr.exe	32
PID 828 wrote to memory of 568	828	full_min_cr.exe	32

memory/828-54-0x0000000000330000-0x00000000005EC000-memory.dmp

Filesize
2.7MB

Download
memory/828-55-0x0000000004B50000-0x0000000004B90000-memory.dmp

Filesize
256KB

Download
memory/828-56-0x0000000000320000-0x0000000000334000-memory.dmp

Filesize
80KB

Download
memory/828-57-0x0000000004B50000-0x0000000004B90000-memory.dmp

Filesize
256KB

Download
memory/828-58-0x0000000009730000-0x000000000996A000-memory.dmp

Filesize
2.2MB

Download
memory/828-59-0x000000000CD70000-0x000000000D182000-memory.dmp

Filesize
4.1MB

Download