Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14-10-2023 00:57

General

  • Target

    a82af3b1496ad54879cb7974882e06c656044e43226114e78833dd9a7f6f1603.exe

  • Size

    1.3MB

  • MD5

    ea50f1a4e143ddd0cbaa9c6b90d41263

  • SHA1

    78f1d44765314dd1710b6d79d359b0d12be9edde

  • SHA256

    a82af3b1496ad54879cb7974882e06c656044e43226114e78833dd9a7f6f1603

  • SHA512

    9e5265964096effc9ea4e17c15395bd733f85413721e7c69f1acdfdbefb74133f8011234388118da8e7eb0e31466a72bb2a385b943024cc816afc94355207a65

  • SSDEEP

    24576:lAzdnRfOQMgv6TgYyQoYt/5vDSVXT5XLU1ioWuya:WhnRfOQMgiTlMXT5XL01

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a82af3b1496ad54879cb7974882e06c656044e43226114e78833dd9a7f6f1603.exe
    "C:\Users\Admin\AppData\Local\Temp\a82af3b1496ad54879cb7974882e06c656044e43226114e78833dd9a7f6f1603.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1248-0-0x0000000000450000-0x0000000000484000-memory.dmp

    Filesize

    208KB

  • memory/1248-1-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

    Filesize

    9.9MB

  • memory/1248-3-0x0000000002300000-0x0000000002380000-memory.dmp

    Filesize

    512KB

  • memory/1248-2-0x0000000002300000-0x0000000002380000-memory.dmp

    Filesize

    512KB

  • memory/1248-4-0x0000000000490000-0x000000000049A000-memory.dmp

    Filesize

    40KB

  • memory/1248-5-0x0000000000490000-0x000000000049A000-memory.dmp

    Filesize

    40KB

  • memory/1248-6-0x0000000002300000-0x0000000002380000-memory.dmp

    Filesize

    512KB

  • memory/1248-7-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

    Filesize

    9.9MB

  • memory/1248-8-0x0000000002300000-0x0000000002380000-memory.dmp

    Filesize

    512KB

  • memory/1248-9-0x0000000000490000-0x000000000049A000-memory.dmp

    Filesize

    40KB

  • memory/1248-10-0x0000000000490000-0x000000000049A000-memory.dmp

    Filesize

    40KB

  • memory/1248-11-0x0000000000490000-0x0000000000492000-memory.dmp

    Filesize

    8KB

  • memory/1248-12-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

    Filesize

    9.9MB