ab1f34ee9914735ed0bd202bde699aadb792243a7d7f550f6adc4014733177fa | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 14:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ac254fff4c0cf8ae19ff2843f7e59911.exe
Size

91KB
MD5

ac254fff4c0cf8ae19ff2843f7e59911
SHA1

7bd779931b2128548581bbae33097f03b5a66889
SHA256

ab1f34ee9914735ed0bd202bde699aadb792243a7d7f550f6adc4014733177fa
SHA512

16d9f7749b815e7a5ceab60faa62976d9102594602c27c32758a9ba35bb5d43ca94955a6003b2b89434019a4456d392e660b071caec29faa1f2951c32ca4cf36
SSDEEP

1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFx:NwtRonyypexoiNtxYGx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2352	ac254fff4c0cf8ae19ff2843f7e59911.exe

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
2352	ac254fff4c0cf8ae19ff2843f7e59911.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2352	ac254fff4c0cf8ae19ff2843f7e59911.exe

C:\Users\Admin\AppData\Local\Temp\ac254fff4c0cf8ae19ff2843f7e59911.exe
"C:\Users\Admin\AppData\Local\Temp\ac254fff4c0cf8ae19ff2843f7e59911.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads