Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 03:23

General

  • Target

    5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe

  • Size

    6.5MB

  • MD5

    90d993c0fccc58d5377018493763f8f0

  • SHA1

    4f194124db4f911b26cfb1fc52634c7a3b2b4417

  • SHA256

    5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844

  • SHA512

    340b2ca78c485b057f074bf70c4a9ed063648fd206ffe813564ff618bdef9251bd623bbab5f834d7205b3a35e581f7c1a20b79ade994727b4005d285e2423c6d

  • SSDEEP

    49152:5GnkEMF2tGosMzWfrnvtwLptXq+dI729euG1VbQZOaJK31V+NmxagfIApcmUpsdI:5GireXttXq+dI729euG1aK31DjjCjEp

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe
    "C:\Users\Admin\AppData\Local\Temp\5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1952-0-0x0000000000D00000-0x0000000002868000-memory.dmp

    Filesize

    27.4MB

  • memory/1952-1-0x0000000000D00000-0x0000000002868000-memory.dmp

    Filesize

    27.4MB