Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 23:53

General

  • Target

    782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe

  • Size

    1.3MB

  • MD5

    b10de24b2e9b26a4eb34e4edb8bf5f04

  • SHA1

    efc2e64bf41a90b92f0d0eaf62eaa4bf92dc88b7

  • SHA256

    782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa

  • SHA512

    f3ea4759a18aa399efffacfef4f3e18f2f2815736721a9b81eda71f33baa7c6952f7d64403cae20353bca28b926ed7430ecf7e1e7b56252ef37ee23891696347

  • SSDEEP

    12288:a3P/aK2vB+wYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:a/CKABuc+pFB5z+//ufNRoZW

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe
    "C:\Users\Admin\AppData\Local\Temp\782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2876-0-0x0000000000400000-0x00000000005F7000-memory.dmp

          Filesize

          2.0MB

        • memory/2876-1-0x0000000000390000-0x00000000003F7000-memory.dmp

          Filesize

          412KB

        • memory/2876-8-0x0000000000390000-0x00000000003F7000-memory.dmp

          Filesize

          412KB

        • memory/2876-11-0x0000000000400000-0x00000000005F7000-memory.dmp

          Filesize

          2.0MB