Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-03-2024 17:49

General

  • Target

    Mtkfarukc.exe

  • Size

    23KB

  • MD5

    3e2f66f617318069be60fe1c16ecdfd6

  • SHA1

    7712d6f2c085ac2603a3701143e8ac71f7b3aa9e

  • SHA256

    1cfbcd1f141c0199ba408b39fb9a178894c2bec3a05a64f961dc06f7939fabf3

  • SHA512

    f111cddf1d2c4cb630a9dcc3cf6f3dfdea7eeac2e286080299011cdac18ee84c36e035807856461cb64b68262cc51cf0951b55bca5cace7361b6f7d835f3d0da

  • SSDEEP

    384:ByF6ioX0duXscfvOiCf8euj2jkyjjZjstc1c27C0qRQhYrtG5S/2vHvrY/:Bu38DCkeuj2jkyjjZjstc1TMv0PrY/

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Mtkfarukc.exe
    "C:\Users\Admin\AppData\Local\Temp\Mtkfarukc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2548-0-0x00000000003A0000-0x00000000003AC000-memory.dmp

    Filesize

    48KB

  • memory/2548-1-0x00000000745E0000-0x0000000074CCE000-memory.dmp

    Filesize

    6.9MB

  • memory/2548-2-0x0000000004610000-0x0000000004650000-memory.dmp

    Filesize

    256KB

  • memory/2548-3-0x00000000745E0000-0x0000000074CCE000-memory.dmp

    Filesize

    6.9MB

  • memory/2548-4-0x0000000004610000-0x0000000004650000-memory.dmp

    Filesize

    256KB