e0077f49d2dce94cb0e166b1d7745de66c334257b27cac2f42a92232276748b9 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/03/2024, 10:34

Sharing

Report Analysis Logs

General

Target

def39ab2a773bc77e071e7670a3b050f.exe
Size

82KB
MD5

def39ab2a773bc77e071e7670a3b050f
SHA1

3e247c7b7466666bc9ee4f1b47bc42e35df837b8
SHA256

e0077f49d2dce94cb0e166b1d7745de66c334257b27cac2f42a92232276748b9
SHA512

6157a3b5372fac3438fee5ace5eacdf164f38192d7c390bda008765d8c74af9493229cc8ddcbb38544e3a392b9810ccd2d69b052346225eef734cf5ee5f8ac37
SSDEEP

1536:F7is4ALcVbhfL5sMBAWF7TuGjTha2pNO99:FOs4nbNwmPuQa2jO99

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2228	def39ab2a773bc77e071e7670a3b050f.exe

C:\Users\Admin\AppData\Local\Temp\def39ab2a773bc77e071e7670a3b050f.exe
"C:\Users\Admin\AppData\Local\Temp\def39ab2a773bc77e071e7670a3b050f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads