Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 18:33

General

  • Target

    BBVA__Aviso_de_Pago_pdf.pif.exe

  • Size

    46KB

  • MD5

    c34b58d960ea87eec970a9333c7f9292

  • SHA1

    ca23b1d2418edc91a2a49968738ce09a6f7bbfc6

  • SHA256

    8b3aa60f494833274c18171586730f2f4650a0c8c2de4cd901d853948b6f1fce

  • SHA512

    e1dc12741f2448059aeb99be1f6e0df91bb4ee655b3be892ecc027842e78c39b3388cb5748dbac8b56f8ad245312194159522619b26c6775f558b72245c64aab

  • SSDEEP

    768:LDpDj/nau11+B1Z9wg4MYVctOi3FaKMUXF1x2ySCtk7PHqAk:HpvnaK1+ZWg4MYVcAKMUX/x26qHVk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BBVA__Aviso_de_Pago_pdf.pif.exe
    "C:\Users\Admin\AppData\Local\Temp\BBVA__Aviso_de_Pago_pdf.pif.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2892-0-0x000000007460E000-0x000000007460F000-memory.dmp
    Filesize

    4KB

  • memory/2892-1-0x0000000000260000-0x0000000000272000-memory.dmp
    Filesize

    72KB

  • memory/2892-2-0x0000000074600000-0x0000000074CEE000-memory.dmp
    Filesize

    6.9MB

  • memory/2892-3-0x000000007460E000-0x000000007460F000-memory.dmp
    Filesize

    4KB

  • memory/2892-4-0x0000000074600000-0x0000000074CEE000-memory.dmp
    Filesize

    6.9MB