Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 19:30

General

  • Target

    75549a6b0135dba4f2d22b678b8983bd.exe

  • Size

    6KB

  • MD5

    75549a6b0135dba4f2d22b678b8983bd

  • SHA1

    b204b9b6eecf109c3a46c26663d389e4f5447463

  • SHA256

    6c784615d12dfc3af5716ed64194380a301becb7d7f99e08479ce6affd8c5b32

  • SHA512

    8859d5ec3ef5324a178e1e7dbe470a9f58242a209c7e2ff9f3f71f97e46d33b30c57d388fcba6a6038e6c4c27f9cd00e990110212c2c7d1bdbe879baf201f8b3

  • SSDEEP

    48:6RGL9Y1/ixat7I3J+HKX5LFqNMSgjMA9JTHgSl+HgKbkjcd4im54tdtdlrTaA6Gq:Qix53ke5LOgjwSlxjjcd4A19ozNtx

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\75549a6b0135dba4f2d22b678b8983bd.exe
    "C:\Users\Admin\AppData\Local\Temp\75549a6b0135dba4f2d22b678b8983bd.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1948-0-0x0000000001120000-0x0000000001128000-memory.dmp

          Filesize

          32KB

        • memory/1948-1-0x000007FEF55E0000-0x000007FEF5FCC000-memory.dmp

          Filesize

          9.9MB

        • memory/1948-2-0x000000001B390000-0x000000001B410000-memory.dmp

          Filesize

          512KB

        • memory/1948-3-0x000007FEF55E0000-0x000007FEF5FCC000-memory.dmp

          Filesize

          9.9MB