Analysis

  • max time kernel
    148s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2023, 19:00

General

  • Target

    New Client - Copy - Copy (2).exe

  • Size

    65KB

  • MD5

    a97418983327443a206654cca8bcfee1

  • SHA1

    bd35cd8060032343bc30c61a14f559589758b3b8

  • SHA256

    4f2fb9d8928b5087960d7807d8cb0f2fb2a11291f539e1f18326a7baf0f7e191

  • SHA512

    a15470019d89c685897a18932d46d0ac73f656bcaad65c042881d413860fa48c500b22d833fc384ee24448c188aaac6f00ccce586d4f4b4edbe28a91e438bef6

  • SSDEEP

    1536:zS10zQoN36tKQviFw14fnqBnvb7fLteF3nLrB9z3neaF9bSS9vM:zS10zQoN36tKQviFC0qBn3fWl9zOaF92

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\New Client - Copy - Copy (2).exe
    "C:\Users\Admin\AppData\Local\Temp\New Client - Copy - Copy (2).exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1040-54-0x0000000074AF0000-0x000000007509B000-memory.dmp

          Filesize

          5.7MB

        • memory/1040-55-0x0000000074AF0000-0x000000007509B000-memory.dmp

          Filesize

          5.7MB

        • memory/1040-56-0x0000000000A30000-0x0000000000A70000-memory.dmp

          Filesize

          256KB

        • memory/1040-57-0x0000000074AF0000-0x000000007509B000-memory.dmp

          Filesize

          5.7MB

        • memory/1040-58-0x0000000074AF0000-0x000000007509B000-memory.dmp

          Filesize

          5.7MB