c2c3665fcc34cfb52d73b9b5c28f04b3ce1c0d585dceb614d3759626d1326631

Analysis

max time kernel
601s
max time network
606s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 15:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

123.exe
Size

4.1MB
MD5

1940141f673cf5536ff354391ff0f05f
SHA1

17e1c27edb8a1c0414db9ed4a1191a362f1b9d6f
SHA256

c2c3665fcc34cfb52d73b9b5c28f04b3ce1c0d585dceb614d3759626d1326631
SHA512

c9b9e42443c7fb773291e17e81a76fa1737134ee123d4666b259178b2c28e726493656d9920990e888e11cd969bc79f6336bdc6894d8ff33d9d756d1d6fbfc78
SSDEEP

98304:MGAavs46NdN7YJhb1l3dL1NzpOnnhgdTZmaZ9kYNX9AHD8YgDCyi1cQJXu25+Z2X:MG3vUhYJTl3d5NVOnhgdTZlZ9kYNX9CN

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2756 set thread context of 2660	2756	123.exe	28

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2756	123.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28
PID 2756 wrote to memory of 2660	2756	123.exe	28

C:\Users\Admin\AppData\Local\Temp\123.exe
"C:\Users\Admin\AppData\Local\Temp\123.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Users\Admin\AppData\Local\Temp\123.exe
  C:\Users\Admin\AppData\Local\Temp\123.exe
  2⤵
  PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2660-56-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-52-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-2209-0x00000000010A0000-0x000000000113E000-memory.dmp

Filesize
632KB

Download
memory/2660-72-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-76-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-74-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-70-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-7-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/2660-8-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/2660-32-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-30-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-12-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/2660-68-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-16-0x000007FEF5700000-0x000007FEF60EC000-memory.dmp

Filesize
9.9MB

Download
memory/2660-17-0x0000000002A70000-0x0000000002B78000-memory.dmp

Filesize
1.0MB

Download
memory/2660-18-0x0000000001140000-0x00000000011C0000-memory.dmp

Filesize
512KB

Download
memory/2660-19-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-20-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-22-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-24-0x000007FEF5700000-0x000007FEF60EC000-memory.dmp

Filesize
9.9MB

Download
memory/2660-25-0x0000000001140000-0x00000000011C0000-memory.dmp

Filesize
512KB

Download
memory/2660-26-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-66-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-10-0x000007FFFFFD5000-0x000007FFFFFD6000-memory.dmp

Filesize
4KB

Download
memory/2660-9-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/2660-34-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-36-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-38-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-40-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-42-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-44-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-46-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-48-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-50-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-28-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-54-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-62-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-58-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-60-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2660-64-0x0000000002A70000-0x0000000002B73000-memory.dmp

Filesize
1.0MB

Download
memory/2756-0-0x0000000001240000-0x000000000166A000-memory.dmp

Filesize
4.2MB

Download
memory/2756-1-0x000007FEF5700000-0x000007FEF60EC000-memory.dmp

Filesize
9.9MB

Download
memory/2756-14-0x000007FEF5700000-0x000007FEF60EC000-memory.dmp

Filesize
9.9MB

Download
memory/2756-6-0x0000000000830000-0x000000000087C000-memory.dmp

Filesize
304KB

Download
memory/2756-5-0x000000001D5B0000-0x000000001D6A6000-memory.dmp

Filesize
984KB

Download
memory/2756-4-0x000000001CB20000-0x000000001CC16000-memory.dmp

Filesize
984KB

Download
memory/2756-3-0x000000001C5E0000-0x000000001C6EE000-memory.dmp

Filesize
1.1MB

Download
memory/2756-2-0x000000001C100000-0x000000001C180000-memory.dmp

Filesize
512KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads