Analysis
-
max time kernel
18s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
13-08-2023 18:33
General
-
Target
bg.exe
-
Size
688KB
-
MD5
054b2bae2fde2432570c1e201915d5c2
-
SHA1
f6ff9c425953a09c43952b7e50287eb9b2962e69
-
SHA256
aa7d7ea346331c9c6967d59a073ee7ae81d11613680f28dee831ca9fbf1fe7fb
-
SHA512
a62a9301a53504284a0d3596429c16887ba95809e28753df86d5cc9a57c5a2fcbe91dd83748678408f4406214b3ab7395b449755c92173577f6f7d588d30a904
-
SSDEEP
12288:QoPCLS7hVU4xHribMZXK7RfXpqHRcSD5RyyBEAge1sMKB/VdmRxuweSG0:Qo02bhKZpqyuUo8/k1eSx
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bg.exe"C:\Users\Admin\AppData\Local\Temp\bg.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1136-53-0x00000000741F0000-0x00000000748DE000-memory.dmpFilesize
6.9MB
-
memory/1136-54-0x00000000013C0000-0x0000000001476000-memory.dmpFilesize
728KB
-
memory/1136-55-0x0000000006F90000-0x0000000007120000-memory.dmpFilesize
1.6MB
-
memory/1136-56-0x00000000009D0000-0x0000000000A10000-memory.dmpFilesize
256KB
-
memory/1136-57-0x00000000002A0000-0x00000000002C2000-memory.dmpFilesize
136KB
-
memory/1136-58-0x00000000741F0000-0x00000000748DE000-memory.dmpFilesize
6.9MB
-
memory/1136-59-0x00000000009D0000-0x0000000000A10000-memory.dmpFilesize
256KB
-
memory/1136-60-0x00000000741F0000-0x00000000748DE000-memory.dmpFilesize
6.9MB