Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 18:45

General

  • Target

    tmpc08hj9xb.exe

  • Size

    43KB

  • MD5

    d5a43f4ebbfa4cd0dac33181eebc8e95

  • SHA1

    934d2f97cb41cf53c7e9ffb1453f438d99595b46

  • SHA256

    4f0b49980b4e164a378bbd9e052c327f7c5f72e1e361f55adce73ca2dda2db4c

  • SHA512

    b1f338bbda961b94d0f202a55f26abc98b4b6ba3f1e2e66f17443acf49fea5efdfbd98aa21561abf3d176370ebbfc90296b0e7df807ecb30f86834604f5f5732

  • SSDEEP

    768:TThs3UNoYhEHdJfeqTSKNeHoDLSWWKcsM9+jxjOI2RaAXbSN:3hs3MbhgJJTxeGSWW0Djb2RawbSN

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmpc08hj9xb.exe
    "C:\Users\Admin\AppData\Local\Temp\tmpc08hj9xb.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1720-0-0x00000000745BE000-0x00000000745BF000-memory.dmp

    Filesize

    4KB

  • memory/1720-1-0x0000000000B60000-0x0000000000B72000-memory.dmp

    Filesize

    72KB

  • memory/1720-2-0x00000000745B0000-0x0000000074C9E000-memory.dmp

    Filesize

    6.9MB

  • memory/1720-3-0x00000000745BE000-0x00000000745BF000-memory.dmp

    Filesize

    4KB

  • memory/1720-4-0x00000000745B0000-0x0000000074C9E000-memory.dmp

    Filesize

    6.9MB