Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 11:09

General

  • Target

    86bf66df2acbb1fb88db9b38c4dea746.exe

  • Size

    662KB

  • MD5

    86bf66df2acbb1fb88db9b38c4dea746

  • SHA1

    b67192f0268f1a9f24aa36ee3787f93192ffb194

  • SHA256

    a86dd3e06fc22b36fec7d577251ea051b38d02c95608a806895c34119769abf9

  • SHA512

    ccf63106c48e7257d9f42f210701477fdb5028f9cd89428085e18f3c11b89668200ebeb66bc9a743c968938f09aefd8a959b0995a0a9aa982aceb44906108323

  • SSDEEP

    12288:OpeV3CZrqhwjMLJ2R46pJEq/y6INX6LRgU7e96ptgzMYTmsZHwA+J:mUwQLJ2RHGq/wKgD6goYTfWzJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86bf66df2acbb1fb88db9b38c4dea746.exe
    "C:\Users\Admin\AppData\Local\Temp\86bf66df2acbb1fb88db9b38c4dea746.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1716-0-0x00000000012A0000-0x000000000134C000-memory.dmp

    Filesize

    688KB

  • memory/1716-1-0x0000000074810000-0x0000000074EFE000-memory.dmp

    Filesize

    6.9MB

  • memory/1716-2-0x0000000004B00000-0x0000000004B40000-memory.dmp

    Filesize

    256KB

  • memory/1716-3-0x0000000074810000-0x0000000074EFE000-memory.dmp

    Filesize

    6.9MB

  • memory/1716-4-0x0000000004B00000-0x0000000004B40000-memory.dmp

    Filesize

    256KB