Overview

overview

3

Static

static

3

a08108f388...40.exe

windows7-x64

1

a08108f388...40.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    09-10-2023 09:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a08108f38843ee5759249f755ed9f9e7b6addc1632379d2008ce1ddbb4123d40.exe

  • Size

    5.4MB

  • MD5

    292f849f029bc5fd493be17ee62dd9b8

  • SHA1

    d9f769b25843cc89c33b1134c443c3e316bef761

  • SHA256

    a08108f38843ee5759249f755ed9f9e7b6addc1632379d2008ce1ddbb4123d40

  • SHA512

    df40c7fb7de3123ae1eecac07b3e61077df3b600d6d61e2cab0c39558d6d98da1a085859508f835886cf6561b2833053a34566c9a7b41489f44ec1cd2b3beb47

  • SSDEEP

    98304:6a3chHLsZAOES28JH5LL5qk/XRNSsETYavKsCS728mpLt33RNSzLqonl0zqnXWyq:1eAREbSZfw4zqTKsH2/U+GaqnXLPBD

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a08108f38843ee5759249f755ed9f9e7b6addc1632379d2008ce1ddbb4123d40.exe
    "C:\Users\Admin\AppData\Local\Temp\a08108f38843ee5759249f755ed9f9e7b6addc1632379d2008ce1ddbb4123d40.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1132-0-0x0000000000400000-0x00000000009BD000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1132-1-0x0000000000400000-0x00000000009BD000-memory.dmp

    Filesize

    5.7MB

    Download