Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
20-12-2023 12:39
General
-
Target
1/PO20230225-13360.exe
-
Size
1.7MB
-
MD5
1de394a0a6affdde99950a9e1ad68850
-
SHA1
4ee5da777bd322a52bc866cc825e92717e6d9719
-
SHA256
56ebfae5fdf1e38b652f712f7e4672826e7c805b70ab6f21c02418461d99fabf
-
SHA512
aa385c57afa4ec2afe778cae203a7488a271aec965aa9338639b8a5298931c6319f5eee3c3304e31bb8fea23797f61d416dd7ca74b5d67db5c2633702b74611b
-
SSDEEP
24576:a9Q+/0oYyxPxPO9fju1khU+A3zj9hQhNsc7hf:WQmQTszj9hQhNs8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1\PO20230225-13360.exe"C:\Users\Admin\AppData\Local\Temp\1\PO20230225-13360.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1212-0-0x0000000001150000-0x00000000012FA000-memory.dmpFilesize
1.7MB
-
memory/1212-1-0x000007FEF5E60000-0x000007FEF684C000-memory.dmpFilesize
9.9MB
-
memory/1212-2-0x000000001C010000-0x000000001C090000-memory.dmpFilesize
512KB
-
memory/1212-3-0x000007FEF5E60000-0x000007FEF684C000-memory.dmpFilesize
9.9MB
-
memory/1212-4-0x000000001C010000-0x000000001C090000-memory.dmpFilesize
512KB