Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 17:37

General

  • Target

    594f78123bb48f6c54a204a3e59c244d.exe

  • Size

    21KB

  • MD5

    594f78123bb48f6c54a204a3e59c244d

  • SHA1

    e57a2cae327535315b7689e677102bf951a8f212

  • SHA256

    13cd499b83ba130c02114a625dec4d0c05346fdc96f8473d3619b5ccb5586fcd

  • SHA512

    b9608497a7ff6ec3b65fe5a4ec2b8082e3711eeb59a436794b96de5f3e0a1df5caa7e1771fb1c25d457877c79750dd7c4ee43a337d592756cc9733e8a62b9fff

  • SSDEEP

    384:uxht50yHS+f4TUWk/WcrQuLU7+V0hLcj/K+hSEvjLxLeeQIDXYjoq:uxht57S2WXcUuLEmRXlB7Yjoq

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\594f78123bb48f6c54a204a3e59c244d.exe
    "C:\Users\Admin\AppData\Local\Temp\594f78123bb48f6c54a204a3e59c244d.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2316

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2316-0-0x000007FEF5F10000-0x000007FEF68AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2316-1-0x0000000000AE0000-0x0000000000B60000-memory.dmp

          Filesize

          512KB

        • memory/2316-2-0x000007FEF5F10000-0x000007FEF68AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2316-3-0x000007FEF5F10000-0x000007FEF68AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2316-4-0x0000000000AE0000-0x0000000000B60000-memory.dmp

          Filesize

          512KB

        • memory/2316-5-0x000007FEF5F10000-0x000007FEF68AD000-memory.dmp

          Filesize

          9.6MB