Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 09:55

General

  • Target

    50fb76c1152e262a7004c115757934ccd0fa8f7c4ffa80c60f28aeaef57fb6bf.exe

  • Size

    12.0MB

  • MD5

    e40a4a288b5b2f5d629598187db24067

  • SHA1

    3496d2b708b2f12280a94b3236be3d3a99edf9d7

  • SHA256

    50fb76c1152e262a7004c115757934ccd0fa8f7c4ffa80c60f28aeaef57fb6bf

  • SHA512

    c1a494af90e3ac896ed9e1e5499f7d35a1601275a807df25413ba3ffb4fe6a6e8bd1933c9223882e466bf5a2958ecdf2b59beceee912cb3c2e840e3f297310ec

  • SSDEEP

    196608:e4HKDQBKkXy+Xjt815j5tDobSUFQE9ruInm7ccyXS:eaK0BK+Svj5t0ZFQE9yInmYvS

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\50fb76c1152e262a7004c115757934ccd0fa8f7c4ffa80c60f28aeaef57fb6bf.exe
    "C:\Users\Admin\AppData\Local\Temp\50fb76c1152e262a7004c115757934ccd0fa8f7c4ffa80c60f28aeaef57fb6bf.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of AdjustPrivilegeToken
    PID:2352

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2352-0-0x0000000000400000-0x0000000000F96000-memory.dmp

          Filesize

          11.6MB

        • memory/2352-1-0x0000000077230000-0x0000000077277000-memory.dmp

          Filesize

          284KB

        • memory/2352-506-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-510-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-512-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-516-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-524-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-522-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-520-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-518-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-514-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-508-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-504-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-503-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-526-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-528-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-532-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-540-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-564-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-530-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-562-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-560-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-558-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-556-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-554-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-552-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-550-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-548-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-546-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-544-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-542-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-538-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-536-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-534-0x0000000002D70000-0x0000000002E81000-memory.dmp

          Filesize

          1.1MB

        • memory/2352-7810-0x0000000000400000-0x0000000000F96000-memory.dmp

          Filesize

          11.6MB