Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 11:08

General

  • Target

    80badf36b78151e2c21bc07705e4735f5eb79bbc4d6d8f5cb86521abbcb289c8.exe

  • Size

    705KB

  • MD5

    44d4e42a644b684fec794e88b6cceea1

  • SHA1

    6b84a97ba3277d0c1eee9f1ce1125beba3fd166b

  • SHA256

    80badf36b78151e2c21bc07705e4735f5eb79bbc4d6d8f5cb86521abbcb289c8

  • SHA512

    4824ebee42c73501701c5cb974b735abc52cb88613a8eb95e070b75609a90396d914998cfd38d97f391e5efb55b342fa4beca204a965db38a94f11b6488acc7b

  • SSDEEP

    12288:aW9B+VJUNU1FBtfcPKcOYRLbzQkbL+Qg+H5oeIj5RLLB+lOakPprNFzSRY:aW9BC8S+LbzQkWWbCzLLB+lMP1NFzSRY

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\80badf36b78151e2c21bc07705e4735f5eb79bbc4d6d8f5cb86521abbcb289c8.exe
    "C:\Users\Admin\AppData\Local\Temp\80badf36b78151e2c21bc07705e4735f5eb79bbc4d6d8f5cb86521abbcb289c8.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1652-0-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB

  • memory/1652-1-0x0000000000810000-0x0000000000877000-memory.dmp

    Filesize

    412KB

  • memory/1652-6-0x0000000000810000-0x0000000000877000-memory.dmp

    Filesize

    412KB

  • memory/1652-11-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB