Resubmissions

30/06/2023, 16:17

230630-trjptseh3s 6

30/06/2023, 16:06

230630-tj2wfaeg7t 6

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2023, 16:17

General

  • Target

    update_4.71.24_v.exe

  • Size

    26.9MB

  • MD5

    3643c9bed11418fd492c84c1f6dbb711

  • SHA1

    9795d71b9b0aadad7c190d2586166f5dd6a14f05

  • SHA256

    1c4ee02f339e2c404a457cafdcbf9e1c06fb48546f0546765d41fd8fd471322d

  • SHA512

    df79be8a916746e073a987c17ef921139f1cba11427244be3dd1afc2ea9c3031d7e6689ef1a8b4736e283a0bedcab556eb72f4d2f36a9d901a33eda571bc29c4

  • SSDEEP

    786432:61FOLcsCKniujW8eAyPjloeamE0GLVgaNMIV2:61F4CJurCrljamsuaNZV2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\update_4.71.24_v.exe
    "C:\Users\Admin\AppData\Local\Temp\update_4.71.24_v.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1776-55-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-54-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-56-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-57-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-58-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-59-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-60-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1776-61-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1776-62-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1776-64-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1776-65-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1776-67-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/1776-68-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/1776-70-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/1776-71-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/1776-73-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/1776-74-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/1776-75-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1776-76-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1776-77-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1776-78-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1776-79-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1776-80-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1776-81-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1776-82-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1776-83-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1776-84-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1776-85-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1776-86-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1776-87-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-88-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-89-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-90-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1776-91-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1776-92-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1776-93-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1776-94-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1776-95-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1776-96-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1776-97-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1776-98-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1776-99-0x0000000000870000-0x0000000000871000-memory.dmp

    Filesize

    4KB

  • memory/1776-100-0x0000000000870000-0x0000000000871000-memory.dmp

    Filesize

    4KB

  • memory/1776-101-0x0000000000870000-0x0000000000871000-memory.dmp

    Filesize

    4KB

  • memory/1776-102-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/1776-103-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/1776-104-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/1776-105-0x0000000000890000-0x0000000000891000-memory.dmp

    Filesize

    4KB

  • memory/1776-106-0x0000000000890000-0x0000000000891000-memory.dmp

    Filesize

    4KB

  • memory/1776-107-0x0000000000890000-0x0000000000891000-memory.dmp

    Filesize

    4KB

  • memory/1776-108-0x00000000008A0000-0x00000000008A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-109-0x00000000008A0000-0x00000000008A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-110-0x00000000008A0000-0x00000000008A1000-memory.dmp

    Filesize

    4KB

  • memory/1776-111-0x00000000008B0000-0x00000000008B1000-memory.dmp

    Filesize

    4KB

  • memory/1776-112-0x00000000008B0000-0x00000000008B1000-memory.dmp

    Filesize

    4KB

  • memory/1776-113-0x00000000008B0000-0x00000000008B1000-memory.dmp

    Filesize

    4KB

  • memory/1776-114-0x00000000008C0000-0x00000000008C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-115-0x00000000008C0000-0x00000000008C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-116-0x00000000008C0000-0x00000000008C1000-memory.dmp

    Filesize

    4KB

  • memory/1776-117-0x00000000008D0000-0x00000000008D1000-memory.dmp

    Filesize

    4KB