Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 01:51

General

  • Target

    MiniDump.exe

  • Size

    57KB

  • MD5

    80926c91b6d82c4ad7f915bafa70e8d3

  • SHA1

    1302a5bd20d2927f720fd4c22422e37fa2245916

  • SHA256

    2a059074a33ed243a36891aea3adb60038f81401b3a9f0ec9282350e0450ec3a

  • SHA512

    2a655dc02107eec20e6cdcc856221bb8a56b554d21deb81ad3f6036e1d622c4074d318a404650d7cc0aff3cfe24d01d8250605399f04f4b155bdb56f4548dc45

  • SSDEEP

    768:kFePuWUDO+ZOE+6i23yCRa3oET8gETk/Fv5OGlfDVbod7jM:7PuJNV+6icW3U2FPfDVO0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MiniDump.exe
    "C:\Users\Admin\AppData\Local\Temp\MiniDump.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2328-0-0x000000013FB00000-0x000000013FB12000-memory.dmp

          Filesize

          72KB

        • memory/2328-1-0x000007FEF5B10000-0x000007FEF64FC000-memory.dmp

          Filesize

          9.9MB

        • memory/2328-2-0x000007FEF5B10000-0x000007FEF64FC000-memory.dmp

          Filesize

          9.9MB