Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 10:51 UTC

General

  • Target

    55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe

  • Size

    1.7MB

  • MD5

    3b4b5f857d853f6dccd4976624acb6cc

  • SHA1

    193251c516508cfacadd8c3cf9a4fbc13ad28c74

  • SHA256

    55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6

  • SHA512

    a46a5cfdf800e8c19ff5c39830b9d121c91ba55c7c414876d3321f3cf08de7f089638f496c178128fdebbd53f0d280c9763fc78eed1c06dc43955f280ca690e4

  • SSDEEP

    24576:8Sal4MDeQZ0EaZD16NFWT2/wajWeqD4EAfGTFyaPj2wd1I9DSVXT5X:8S44hQZ0BD14FWAwajWEGF1Ky1NXT5X

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe
    "C:\Users\Admin\AppData\Local\Temp\55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1512-0-0x0000000000250000-0x0000000000284000-memory.dmp

    Filesize

    208KB

  • memory/1512-1-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

    Filesize

    9.9MB

  • memory/1512-2-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-3-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-4-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-5-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

    Filesize

    9.9MB

  • memory/1512-7-0x0000000001D40000-0x0000000001D4A000-memory.dmp

    Filesize

    40KB

  • memory/1512-6-0x0000000001D40000-0x0000000001D4A000-memory.dmp

    Filesize

    40KB

  • memory/1512-8-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-9-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-10-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-11-0x0000000002840000-0x00000000028C0000-memory.dmp

    Filesize

    512KB

  • memory/1512-12-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

    Filesize

    9.9MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.