Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
20-12-2023 12:39
General
-
Target
1/loader.exe
-
Size
1.0MB
-
MD5
4352f5a287cfad25081cfd97efd44bfa
-
SHA1
356cea8615901d3139725bd10135abadf4d55096
-
SHA256
7d32586ca0e7a39825f51f913c9a5535aa595d4b020e2c184a7d08af0b583c67
-
SHA512
e1ce791f703d4845c1fdf4612ed05ea2f8e7a74beb0c4197b43545b8347ff6931fa82f9cc0d6ecd054845a8de473c6caedf4edfdc4ea2847f62ec39e7ce90dfc
-
SSDEEP
24576:aDBf+dAD0+x04QXl1pSmWKRlrRL5OM3ikggwlZkkBtqsUiRmc:te0tl6mWKRl1NJHgDk4trpRmc
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1\loader.exe"C:\Users\Admin\AppData\Local\Temp\1\loader.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2944-0-0x00000000008D0000-0x00000000009D6000-memory.dmpFilesize
1.0MB
-
memory/2944-1-0x000007FEF56E0000-0x000007FEF60CC000-memory.dmpFilesize
9.9MB
-
memory/2944-2-0x000000001B3F0000-0x000000001B470000-memory.dmpFilesize
512KB
-
memory/2944-3-0x0000000000340000-0x0000000000341000-memory.dmpFilesize
4KB
-
memory/2944-4-0x000007FEF56E0000-0x000007FEF60CC000-memory.dmpFilesize
9.9MB
-
memory/2944-5-0x000000001B3F0000-0x000000001B470000-memory.dmpFilesize
512KB