Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:30

General

  • Target

    283a24ec5e7b085eebb28d0825cf949e.exe

  • Size

    721KB

  • MD5

    283a24ec5e7b085eebb28d0825cf949e

  • SHA1

    c78be3662a5ca941e73e60ff49192867cc7a9f72

  • SHA256

    861e55285a5b0806d9120e00039458d002156c02f2944bdce46f85125dcca6cb

  • SHA512

    29131554f5d4aa75171ddb6849c474274e7f596baeee4cc79a96cdc78f51e3c7693f235ce308beba231240161813b948eaf58e176260ccc337f837c217898948

  • SSDEEP

    12288:UpVxVU1Uhvodenef5+G9I1sQc2iNF2iNi4QissaMJcR/V:U3y1j1esId

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\283a24ec5e7b085eebb28d0825cf949e.exe
    "C:\Users\Admin\AppData\Local\Temp\283a24ec5e7b085eebb28d0825cf949e.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:2672

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\77096bc4-d557-4686-a4fa-16e88c50ed96\ .dll

          Filesize

          141KB

          MD5

          e8641f344213ca05d8b5264b5f4e2dee

          SHA1

          96729e31f9b805800b2248fd22a4b53e226c8309

          SHA256

          85e82b9e9200e798e8f434459eacee03ed9818cc6c9a513fe083e72d48884e24

          SHA512

          3130f32c100ecb97083ad8ac4c67863e9ceed3a9b06fc464d1aeeaec389f74c8bf56f4ce04f6450fd2cc0fa861d085101c433cfa4bec3095f8ebeeb53b739109

        • memory/2672-0-0x0000000000B30000-0x0000000000BEA000-memory.dmp

          Filesize

          744KB

        • memory/2672-1-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

          Filesize

          9.9MB

        • memory/2672-2-0x000000001AB80000-0x000000001AC00000-memory.dmp

          Filesize

          512KB

        • memory/2672-9-0x000007FEF7CB0000-0x000007FEF7CD8000-memory.dmp

          Filesize

          160KB

        • memory/2672-10-0x000007FEF4710000-0x000007FEF483C000-memory.dmp

          Filesize

          1.2MB

        • memory/2672-12-0x000007FEF7CB0000-0x000007FEF7CD8000-memory.dmp

          Filesize

          160KB

        • memory/2672-11-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

          Filesize

          9.9MB