Analysis

  • max time kernel
    148s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 02:41

General

  • Target

    52d41d2b5b9fc7877624d603d1d935bcc4c9ca1fe06918664815330c9415b802.exe

  • Size

    32KB

  • MD5

    4014fa6595feaa884dc89aad157c44fe

  • SHA1

    d0518c946f514a93156ee205fb24486a20670a17

  • SHA256

    52d41d2b5b9fc7877624d603d1d935bcc4c9ca1fe06918664815330c9415b802

  • SHA512

    cd96a0927991ed26ce44e5e818523d3eb02834eaf0243d198dede38b6c64c75845890a986a4b268ceaec531347f5aaa3b90ffe7220ed7f7ec9ae0f7077203a33

  • SSDEEP

    384:m0bUe5XB4e0X7OxmiaXLilpknDAWTEtTUFQqz9KObb+:nT9BuCDaXWlZkb+

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 37 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\52d41d2b5b9fc7877624d603d1d935bcc4c9ca1fe06918664815330c9415b802.exe
    "C:\Users\Admin\AppData\Local\Temp\52d41d2b5b9fc7877624d603d1d935bcc4c9ca1fe06918664815330c9415b802.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1684-0-0x0000000074B30000-0x00000000750DB000-memory.dmp

    Filesize

    5.7MB

  • memory/1684-1-0x0000000074B30000-0x00000000750DB000-memory.dmp

    Filesize

    5.7MB

  • memory/1684-2-0x00000000000D0000-0x0000000000110000-memory.dmp

    Filesize

    256KB

  • memory/1684-3-0x0000000074B30000-0x00000000750DB000-memory.dmp

    Filesize

    5.7MB

  • memory/1684-4-0x0000000074B30000-0x00000000750DB000-memory.dmp

    Filesize

    5.7MB

  • memory/1684-5-0x00000000000D0000-0x0000000000110000-memory.dmp

    Filesize

    256KB