585773958541b6ffe016a2d583ebcaddd6feea3557eee2ef62f64bb829cf9a82 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13-10-2023 04:28

Sharing

Report Analysis Logs

General

Target

n.exe
Size

88KB
MD5

8f8b56a03ab72eb26d4b515176699ce9
SHA1

9a42c31c480bf62b813ea00a26f63d5d92c7d0ea
SHA256

585773958541b6ffe016a2d583ebcaddd6feea3557eee2ef62f64bb829cf9a82
SHA512

d6b04c2dee766b9e4e39ca747d757da525d785133d4a90e48604e64919e6473263eb829a5e1a54b0b7c7a8de5fa7e4d343a95a3a36fd98ecc3d424233e17e832
SSDEEP

1536:XHFuOWmK0PmQuw02VTZhRH7wdtKUJMpU02hlbw0npMmexQEK:3FuOFK0PmuxZhB7wdtZLk2pMmexQEK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2196	n.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2196	n.exe

C:\Users\Admin\AppData\Local\Temp\n.exe
"C:\Users\Admin\AppData\Local\Temp\n.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads