Analysis

  • max time kernel
    132s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 16:25

General

  • Target

    3e754c50d94fcc9ac345ef24bba18bf6.exe

  • Size

    5KB

  • MD5

    3e754c50d94fcc9ac345ef24bba18bf6

  • SHA1

    67408b77d2317cf9abc7fa8c9a2584d98b902c27

  • SHA256

    e03f3a802c5d618ca2b88ec141b0a682e721b7b0341d6f72ff908817b325ccfa

  • SHA512

    ddf1478ad1473d180d81e52d287d6fee64051b2f64a8f89c3b044f049052b992a31a3b3f87d388ad6f13d08cff5240fd19213f5d0cb7e3d0ede6e139f15b8649

  • SSDEEP

    96:nJROYonqegYSvK6/0MRtthfAIEion5bPu15zngn6zyVV341DDtJ:75HtiMRPCI25bPuvzgn6Oj341DDb

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 22 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e754c50d94fcc9ac345ef24bba18bf6.exe
    "C:\Users\Admin\AppData\Local\Temp\3e754c50d94fcc9ac345ef24bba18bf6.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/760-0-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-1-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-2-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-3-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-4-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-6-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-8-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-9-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-10-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-11-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

  • memory/760-12-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB