Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/04/2024, 02:17

General

  • Target

    629972d9b14de4e547d9d4a706b21b304c82458a1d98268406b7ff05c43e0061.exe

  • Size

    705KB

  • MD5

    6b17791fabb8740562096375574283b4

  • SHA1

    97a3a06fe0315b6f2a69d4de8270582ce565d258

  • SHA256

    629972d9b14de4e547d9d4a706b21b304c82458a1d98268406b7ff05c43e0061

  • SHA512

    0be6978e0e829bf37959f1275dfa28b62b613262756b9b6315741fd54de97ebb15480b9806c1aba199f4440f6f9202de383c93eb39b5cbf041526b5a79119ccf

  • SSDEEP

    12288:XW9B+V8RFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:XW9Bd8NDFKYmKOF0zr31JwAlcR3QC0O3

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\629972d9b14de4e547d9d4a706b21b304c82458a1d98268406b7ff05c43e0061.exe
    "C:\Users\Admin\AppData\Local\Temp\629972d9b14de4e547d9d4a706b21b304c82458a1d98268406b7ff05c43e0061.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2120-0-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB

  • memory/2120-1-0x00000000002C0000-0x0000000000327000-memory.dmp

    Filesize

    412KB

  • memory/2120-7-0x00000000002C0000-0x0000000000327000-memory.dmp

    Filesize

    412KB

  • memory/2120-11-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB