Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    17-07-2023 06:02

General

  • Target

    TT.gz.exe

  • Size

    147KB

  • MD5

    841bc4b28567bc672d71cd8a86318236

  • SHA1

    80ff2c2f2e6a5fb63f9d067b158410549ce3a9fd

  • SHA256

    477a2d13d980cac6ec09b09eda410ea674cb8aa69da8a1e6e2a80fcf3b290c9a

  • SHA512

    35660c01c79abad13d99757c4854092b6e3f8f736b892a92f7b6cf0f50a608e4f966f032aeefc3403e4bbda98f604ec25efed1feb5f329fcdbb02fd4bc33b479

  • SSDEEP

    3072:oxmMRd5YFofTo4dXqJYNebTdz8rlmMtcDdNM8x/8v:osMRX04dXgYNeixbtcRNMz

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TT.gz.exe
    "C:\Users\Admin\AppData\Local\Temp\TT.gz.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1788-54-0x0000000000F80000-0x0000000000FAC000-memory.dmp

    Filesize

    176KB

  • memory/1788-55-0x0000000074200000-0x00000000748EE000-memory.dmp

    Filesize

    6.9MB

  • memory/1788-56-0x0000000000420000-0x0000000000460000-memory.dmp

    Filesize

    256KB

  • memory/1788-57-0x0000000074200000-0x00000000748EE000-memory.dmp

    Filesize

    6.9MB