Analysis

  • max time kernel
    27s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2023 01:38

General

  • Target

    5726631bd5354455869b80013d408d97b6d479d61697aecfa253fb42caed3b1b.exe

  • Size

    4.9MB

  • MD5

    a47434b53be19aa80e4529da0ac4e528

  • SHA1

    e2535e69d067f6557f2c83bd05dc47289c61b0d8

  • SHA256

    5726631bd5354455869b80013d408d97b6d479d61697aecfa253fb42caed3b1b

  • SHA512

    f0251d15e29042d432c141f6df43ff267cd3c912a48afe6f83ed1d5588078191eb98763608f2d89b92cb33ec54db16d42bba03a83c329b4cab84615059f28d65

  • SSDEEP

    98304:lfROAm0ADHsXLIsFmL5vTWJdVzealPxaLnU4UUU3UUU:lfROAm0ADHsXLIBvMtUU4UUU3UUU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5726631bd5354455869b80013d408d97b6d479d61697aecfa253fb42caed3b1b.exe
    "C:\Users\Admin\AppData\Local\Temp\5726631bd5354455869b80013d408d97b6d479d61697aecfa253fb42caed3b1b.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1732-54-0x0000000000B60000-0x0000000001042000-memory.dmp

    Filesize

    4.9MB

  • memory/1732-55-0x0000000004F00000-0x0000000005180000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-56-0x0000000004920000-0x0000000004960000-memory.dmp

    Filesize

    256KB

  • memory/1732-58-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-57-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-60-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-62-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-64-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-66-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-68-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-70-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-72-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-74-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-76-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-78-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-80-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-82-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-84-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-86-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-88-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-90-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-92-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-94-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-96-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-98-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-100-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-102-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-104-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-106-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-108-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-110-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-112-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-114-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-116-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-118-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-120-0x0000000004F00000-0x000000000517A000-memory.dmp

    Filesize

    2.5MB

  • memory/1732-649-0x0000000004920000-0x0000000004960000-memory.dmp

    Filesize

    256KB

  • memory/1732-1102-0x0000000005750000-0x0000000005946000-memory.dmp

    Filesize

    2.0MB

  • memory/1732-1103-0x00000000005F0000-0x000000000063C000-memory.dmp

    Filesize

    304KB

  • memory/1732-1104-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB