Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 14:23

General

  • Target

    8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe

  • Size

    767KB

  • MD5

    9d62dd6a9803c8f632674ae0c0749b87

  • SHA1

    4002a60ba709b72e24346fa92357f3a930b08385

  • SHA256

    8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e

  • SHA512

    eae5bb8f8c9b5a05ec4cf790e3521594093c41f70e595fa9ca54e378af59c1c9092e85521fbe06476898f21036c13ed785247ed894c54c9bd44dafc32278f0af

  • SSDEEP

    12288:Z7gKNkhm/JuyXnPB+h8WH53JW2gh92q5H8k/jLUKciwGEBg/jKypVrtvzESIG:Z7zNkhm5PBX4JW2Q2tA+Bg/jNRV

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe
    "C:\Users\Admin\AppData\Local\Temp\8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2880-0-0x0000000000400000-0x00000000004C5000-memory.dmp

    Filesize

    788KB

  • memory/2880-1-0x0000000001D90000-0x0000000001DF7000-memory.dmp

    Filesize

    412KB

  • memory/2880-6-0x0000000001D90000-0x0000000001DF7000-memory.dmp

    Filesize

    412KB

  • memory/2880-7-0x0000000001D90000-0x0000000001DF7000-memory.dmp

    Filesize

    412KB

  • memory/2880-12-0x0000000000400000-0x00000000004C5000-memory.dmp

    Filesize

    788KB