Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:31

General

  • Target

    a4b4c8789e89030d65faaf65bdc101e0.exe

  • Size

    8.2MB

  • MD5

    a4b4c8789e89030d65faaf65bdc101e0

  • SHA1

    f5b868b2397da3c2e6901624ad69c5e3a14e7b13

  • SHA256

    aed9bcb1ce9fb25750204cca9c49dba0cc1cb67ff672d09a8d69e730124e17b6

  • SHA512

    141356d0cb1e0b5bffcb0ee609f1c077eecf5d3604cb23a369c489910b98611172ca27b7cead7869752883ff18e181e302279e53d1b2956b7fb81f5c34ebf9de

  • SSDEEP

    196608:QyCa9EOOUNsYdV86YIzWIsH6zuMWeaUkCAaCu:DgUf86YDHSlDkM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4b4c8789e89030d65faaf65bdc101e0.exe
    "C:\Users\Admin\AppData\Local\Temp\a4b4c8789e89030d65faaf65bdc101e0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1404-0-0x0000000074990000-0x000000007507E000-memory.dmp

    Filesize

    6.9MB

  • memory/1404-1-0x0000000000F00000-0x0000000001730000-memory.dmp

    Filesize

    8.2MB

  • memory/1404-2-0x000000000A660000-0x000000000AEC0000-memory.dmp

    Filesize

    8.4MB

  • memory/1404-3-0x00000000053D0000-0x0000000005410000-memory.dmp

    Filesize

    256KB

  • memory/1404-4-0x00000000053D0000-0x0000000005410000-memory.dmp

    Filesize

    256KB

  • memory/1404-5-0x0000000074990000-0x000000007507E000-memory.dmp

    Filesize

    6.9MB

  • memory/1404-6-0x00000000053D0000-0x0000000005410000-memory.dmp

    Filesize

    256KB