Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 03:35

General

  • Target

    54fe306d3fefa3bf415871df516f921bc8b06a30836676925aafbb9e396baa9f.exe

  • Size

    1.3MB

  • MD5

    d8b58bb037ce10f9e2e36cb8ab1f8df4

  • SHA1

    eac167858da221abaa332fe51a82ed1f2fb373e2

  • SHA256

    54fe306d3fefa3bf415871df516f921bc8b06a30836676925aafbb9e396baa9f

  • SHA512

    69857725d48317700b2397b144f590d9643d268c8b98353a01971cc55b0af9a5877096ac23c6e5c2ee79a0ac32d5b90cfeba1d2fbfe13e3cbf5c80898ebd6755

  • SSDEEP

    12288:AtP/aK2vB+CMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:ABCKAB+SkQ/7Gb8NLEbeZ

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54fe306d3fefa3bf415871df516f921bc8b06a30836676925aafbb9e396baa9f.exe
    "C:\Users\Admin\AppData\Local\Temp\54fe306d3fefa3bf415871df516f921bc8b06a30836676925aafbb9e396baa9f.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2100-0-0x0000000000400000-0x000000000054F000-memory.dmp

    Filesize

    1.3MB

  • memory/2100-1-0x0000000000550000-0x00000000005B6000-memory.dmp

    Filesize

    408KB

  • memory/2100-6-0x0000000000550000-0x00000000005B6000-memory.dmp

    Filesize

    408KB

  • memory/2100-11-0x0000000000400000-0x000000000054F000-memory.dmp

    Filesize

    1.3MB