Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2023, 09:14

General

  • Target

    file.exe

  • Size

    399KB

  • MD5

    d1581b2f078035d3df7e108150c5b0bf

  • SHA1

    1a2ccc742c769b6c077767fb03feb6d067877021

  • SHA256

    2267a25ef0920dc4cf6bb3e37da149be15fde2b56df8e0e0880ffd4ca5b2c1d9

  • SHA512

    c6896f4d8cdea4a35314bb0c4e4955c463a6c6a76d51690cd6d807e65079d48687c24b3e457b46656ff91374eed51f4c710f977b91cdc2195c907c77f16bd9ef

  • SSDEEP

    6144:vHsoXG8FEwFY21jFR0Cw467hWvUydYoVYrNZQbpWiT:vMoXbFjbW4NvU1g

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2044-0-0x0000000000230000-0x000000000026B000-memory.dmp

    Filesize

    236KB

  • memory/2044-1-0x0000000000270000-0x00000000002C0000-memory.dmp

    Filesize

    320KB

  • memory/2044-2-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2044-4-0x0000000004830000-0x0000000004896000-memory.dmp

    Filesize

    408KB

  • memory/2044-3-0x00000000747E0000-0x0000000074ECE000-memory.dmp

    Filesize

    6.9MB

  • memory/2044-5-0x00000000049B0000-0x00000000049F0000-memory.dmp

    Filesize

    256KB

  • memory/2044-6-0x00000000049B0000-0x00000000049F0000-memory.dmp

    Filesize

    256KB

  • memory/2044-7-0x0000000004890000-0x00000000048F2000-memory.dmp

    Filesize

    392KB

  • memory/2044-8-0x00000000049B0000-0x00000000049F0000-memory.dmp

    Filesize

    256KB

  • memory/2044-9-0x0000000000230000-0x000000000026B000-memory.dmp

    Filesize

    236KB

  • memory/2044-10-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

  • memory/2044-11-0x0000000000270000-0x00000000002C0000-memory.dmp

    Filesize

    320KB

  • memory/2044-12-0x00000000747E0000-0x0000000074ECE000-memory.dmp

    Filesize

    6.9MB