Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 21:06

General

  • Target

    660987eed435fc11509f3d04da5ad81d.exe

  • Size

    477KB

  • MD5

    660987eed435fc11509f3d04da5ad81d

  • SHA1

    fb063fe2c0463efa2b30445a98e7860e119b43bf

  • SHA256

    91230678788516d6fe337b12afb5a37d13f452c46b76578bc4ce4aee2429101f

  • SHA512

    1bb0c39e000e690c99f569f73dd85c1bb512416c022b5909674ef5a6ddaaaa2b199071d44c88a8444428501952ff4aa93bd6d11f3979aadebcedadc65d3f8988

  • SSDEEP

    6144:iJzKf/zmCja4qQmQCrcbnFuuUcTFx0T21BOcCSaa1MSSB6T1KpQcHCbhp:iJY1ja4qQ+rcbFudkuN/S/1MSSPQcHKP

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\660987eed435fc11509f3d04da5ad81d.exe
    "C:\Users\Admin\AppData\Local\Temp\660987eed435fc11509f3d04da5ad81d.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2360-0-0x0000000000320000-0x000000000039E000-memory.dmp

    Filesize

    504KB

  • memory/2360-1-0x0000000074810000-0x0000000074EFE000-memory.dmp

    Filesize

    6.9MB

  • memory/2360-2-0x0000000000300000-0x000000000031C000-memory.dmp

    Filesize

    112KB

  • memory/2360-3-0x0000000000730000-0x0000000000770000-memory.dmp

    Filesize

    256KB

  • memory/2360-4-0x0000000074810000-0x0000000074EFE000-memory.dmp

    Filesize

    6.9MB