d87f723d17e0397593ea7560d6a0938e25cddcbc77b9128b90f8a1c871665ef8 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 14:24

Sharing

Report Analysis Logs

General

Target

equil/stupidthing200.exe
Size

305KB
MD5

d0428771b2ed046406580f84959c43a5
SHA1

99c42e765225bace02653b8bf9a75e21cf66e0b3
SHA256

ed0c7e37f3992c80fb00180ad9bf9250e014d1f00ba090a2a41847aaa716dba0
SHA512

9d72c884e66bdadb939dd594b730c88ef97e5785c11e0db4f3ca5331145a8c653940cb1f9b4562313fb3f3597e0efd560cb828845273bbe6620d583c87433a3a
SSDEEP

3072:AWiXA+zRfgKNJyXKJkXQDu2xw+Gw/Mwie4F2BiCcBhUjVEIy:AWipR9yXKJGQDuhDwOCcBhgVA

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1640	stupidthing200.exe

C:\Users\Admin\AppData\Local\Temp\equil\stupidthing200.exe
"C:\Users\Admin\AppData\Local\Temp\equil\stupidthing200.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1640-0-0x000000013F2B0000-0x000000013F317000-memory.dmp

Filesize
412KB

Download
memory/1640-1-0x000000013F2B0000-0x000000013F317000-memory.dmp

Filesize
412KB

Download