Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 11:58 UTC

General

  • Target

    1c82dd0e3f9a2f732354849714d9e8d4.exe

  • Size

    382KB

  • MD5

    1c82dd0e3f9a2f732354849714d9e8d4

  • SHA1

    835fbba2afce21d3c9026a3a3b1221018e39005e

  • SHA256

    cb6fb33c4a17419d8745d7d52efaed3c716911d7998cf283fd71d9f72892114a

  • SHA512

    b8f7084da3262509fad673960e046648838fe6f9c1f28d39d4874ecd2f1790b70078b6f3bbf1130c3c5724da0fe33a87f5b005fdd1b479b5c3a882f434fc604d

  • SSDEEP

    6144:D5c1gVWN9LboUy6sQA38CPugWnasUEN3s8vr+QgEzVKsfkV1WIAOI7zxPow8MV4x:Da1gEN9zyXnMCLW5s8vr+qzxcyI1I7FQ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c82dd0e3f9a2f732354849714d9e8d4.exe
    "C:\Users\Admin\AppData\Local\Temp\1c82dd0e3f9a2f732354849714d9e8d4.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2764-0-0x0000000000400000-0x00000000004EB000-memory.dmp

    Filesize

    940KB

  • memory/2764-1-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/2764-2-0x0000000000400000-0x00000000004EB000-memory.dmp

    Filesize

    940KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.