Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
- submitted
25/05/2024, 04:15
General
- Target bd761f95155ee47f4a68b3bf9b9b2ddf390a91c0e2e1a7eb06c13495c8f88571.exe
- Size 244KB
- Sample240525-evrghseb21
- SHA256 bd761f95155ee47f4a68b3bf9b9b2ddf390a91c0e2e1a7eb06c13495c8f88571
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd761f95155ee47f4a68b3bf9b9b2ddf390a91c0e2e1a7eb06c13495c8f88571.exe"C:\Users\Admin\AppData\Local\Temp\bd761f95155ee47f4a68b3bf9b9b2ddf390a91c0e2e1a7eb06c13495c8f88571.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2784-0-0x0000000074DCE000-0x0000000074DCF000-memory.dmp
memory/2784-1-0x00000000011A0000-0x00000000011AA000-memory.dmp
memory/2784-2-0x0000000074DC0000-0x00000000754AE000-memory.dmp
memory/2784-3-0x0000000074DCE000-0x0000000074DCF000-memory.dmp
memory/2784-4-0x0000000074DC0000-0x00000000754AE000-memory.dmp