Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2023, 08:47

General

  • Target

    Gjvdnpikd.exe

  • Size

    10KB

  • MD5

    f7707dc68ef0113a7089fcbfb241f6b4

  • SHA1

    bb82cb1fe49e8e699f2bc7a9eaa56d959f1e9c0a

  • SHA256

    c9ab09547338e5fabc9a5389c098597734e14e00da6f455d106c813177fce35e

  • SHA512

    dcba265d599a693c9a5546db4a9fd57f3c42e94dc8f7fed7f8f7c17d371fafec2bd6e0c875b80acd727cd14c96707f6403fb9226553c5ff66576f5428e34ec72

  • SSDEEP

    192:n4TPB64dwfHjA7MdRhrN47cZnSD4cli/dq:42fM7MdR8AVSLlil

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Gjvdnpikd.exe
    "C:\Users\Admin\AppData\Local\Temp\Gjvdnpikd.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2020-54-0x0000000000260000-0x0000000000268000-memory.dmp

          Filesize

          32KB

        • memory/2020-55-0x000007FEF5840000-0x000007FEF622C000-memory.dmp

          Filesize

          9.9MB

        • memory/2020-56-0x000000001B170000-0x000000001B1F0000-memory.dmp

          Filesize

          512KB

        • memory/2020-57-0x000007FEF5840000-0x000007FEF622C000-memory.dmp

          Filesize

          9.9MB

        • memory/2020-58-0x000000001B170000-0x000000001B1F0000-memory.dmp

          Filesize

          512KB