Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-02-2024 12:41

General

  • Target

    Cvdnacb.exe

  • Size

    23KB

  • MD5

    50e198816a25e6ceeaf4174413b7d1b3

  • SHA1

    5509191f320424402266c02b9b6352aea32638f7

  • SHA256

    748d3b47d1498c7bbf2205b98e8ed577f95872d980ac06baee0426d1c8b166ed

  • SHA512

    c7149694fdbe892ebd8345970f848c0a54de294792b802dcd262c2e9370a4936dde56cd3184a0269377c9c9ee8c8bef62ae2526842ee1caf84696b64eb08f853

  • SSDEEP

    384:M86Fw68yQDd5DY/5i49Rtj1sgw2bCoTBPmrQSpb+5S/2vHvrPQ:4vkITztmgXdST0PrPQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Cvdnacb.exe
    "C:\Users\Admin\AppData\Local\Temp\Cvdnacb.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2756-0-0x0000000000C70000-0x0000000000C7C000-memory.dmp

    Filesize

    48KB

  • memory/2756-1-0x00000000743A0000-0x0000000074A8E000-memory.dmp

    Filesize

    6.9MB

  • memory/2756-2-0x00000000004D0000-0x0000000000510000-memory.dmp

    Filesize

    256KB

  • memory/2756-3-0x00000000743A0000-0x0000000074A8E000-memory.dmp

    Filesize

    6.9MB

  • memory/2756-4-0x00000000004D0000-0x0000000000510000-memory.dmp

    Filesize

    256KB