15cff803dbacb382fcb31c06546d98a51f787d1a8679bdebd49bafe119e0f833 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 06:02

Sharing

Report Analysis Logs

General

Target

52bb44366a0e3cb770957a7dbe1e9ae6.exe
Size

91KB
MD5

52bb44366a0e3cb770957a7dbe1e9ae6
SHA1

3e97301a1b58f3aedf2ccf44239ea2f4ab154566
SHA256

15cff803dbacb382fcb31c06546d98a51f787d1a8679bdebd49bafe119e0f833
SHA512

8662637bc45ffa3f98d21ddc3a7d8ad0fd70f333130cb147a740dd88ee3c7f97b99fbd4463079c81d115f6b3c850dbc0d51b45fdd8a5db44e92ad874a6ce04ee
SSDEEP

1536:2GwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFe:bwtRonyypexoiNtxYGe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2732	52bb44366a0e3cb770957a7dbe1e9ae6.exe

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
2732	52bb44366a0e3cb770957a7dbe1e9ae6.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2732	52bb44366a0e3cb770957a7dbe1e9ae6.exe

C:\Users\Admin\AppData\Local\Temp\52bb44366a0e3cb770957a7dbe1e9ae6.exe
"C:\Users\Admin\AppData\Local\Temp\52bb44366a0e3cb770957a7dbe1e9ae6.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2732-0-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2732-1-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download