Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 15:36

General

  • Target

    eed340a52011425bf17405cd0560dbec13a5155041cd99a41665cb838909a8cc.exe

  • Size

    1.3MB

  • MD5

    540ba8a0988fd1f6c6e093779204342f

  • SHA1

    7de7b8e70e44b9d62f252f73430bc892acbe52d6

  • SHA256

    eed340a52011425bf17405cd0560dbec13a5155041cd99a41665cb838909a8cc

  • SHA512

    847529581883b0c18d57cfa12de540ef6de6483562af9a3c2e2fea6195d06034a403206894ed8d1346f8b405927c45c24c448e300d701911909f5b81aada732b

  • SSDEEP

    12288:V09B+VCMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:V09B4SkQ/7Gb8NLEbeZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eed340a52011425bf17405cd0560dbec13a5155041cd99a41665cb838909a8cc.exe
    "C:\Users\Admin\AppData\Local\Temp\eed340a52011425bf17405cd0560dbec13a5155041cd99a41665cb838909a8cc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2928-0-0x0000000000400000-0x000000000054C000-memory.dmp

          Filesize

          1.3MB

        • memory/2928-1-0x0000000001DC0000-0x0000000001E26000-memory.dmp

          Filesize

          408KB

        • memory/2928-6-0x0000000001DC0000-0x0000000001E26000-memory.dmp

          Filesize

          408KB

        • memory/2928-10-0x0000000000400000-0x000000000054C000-memory.dmp

          Filesize

          1.3MB