Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    29-09-2023 08:47

General

  • Target

    Icsmcwcw.exe

  • Size

    22KB

  • MD5

    3c68b70b369230bfc695f391be176da9

  • SHA1

    46c464f0d1cffeadcdd93c6c86c288860089c78a

  • SHA256

    cad1feb442eba9bbe034cadb76a076607f5ebc98c499255c2971e743c40d681e

  • SHA512

    5bf26ecaadd2831f798ffaa899508f9621b261959540656c93e5b0d51af74e566157fc9f5fa3e9be4f5a24cb701c690bc8b2e72291f412399bd1710a240d0efc

  • SSDEEP

    384:MUTTskJkdw5HKWNPnbn+b/AeH9F9wGjEnAtNCSGFqU9:/5EwYqPbn+rLXiiEnuCLFqU9

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Icsmcwcw.exe
    "C:\Users\Admin\AppData\Local\Temp\Icsmcwcw.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/808-0-0x00000000003B0000-0x00000000003BC000-memory.dmp

    Filesize

    48KB

  • memory/808-1-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/808-2-0x000000001B0C0000-0x000000001B140000-memory.dmp

    Filesize

    512KB

  • memory/808-3-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/808-4-0x000000001B0C0000-0x000000001B140000-memory.dmp

    Filesize

    512KB