Analysis

  • max time kernel
    129s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 01:00

General

  • Target

    00f9985ce5ead924571059504e5e0f699dc55013da6969752da86eaae8c396a6.exe

  • Size

    433KB

  • MD5

    8679a39e2b0abec131fba635ac5395a4

  • SHA1

    95af87b3b3bbb7769a18f8cad0400068803090b5

  • SHA256

    00f9985ce5ead924571059504e5e0f699dc55013da6969752da86eaae8c396a6

  • SHA512

    805a333022aab5837d0ff7765d6beab5d606c3b0f36d3c81d110923f745a2db8f10cff222c8c08fb20b46c8826cbd7936bfae1e18c70cc7ac5ee25dd876c2c9a

  • SSDEEP

    3072:CPB6kNIVvqUBkohcXy5UBteVT4w0WSe5eAHM9gSMhqS+SRUQCIDvGUQyHjD:CPckNI0MhcXVteVT4B5h9gSMXU4xHD

Score
9/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\00f9985ce5ead924571059504e5e0f699dc55013da6969752da86eaae8c396a6.exe
    "C:\Users\Admin\AppData\Local\Temp\00f9985ce5ead924571059504e5e0f699dc55013da6969752da86eaae8c396a6.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2408-0-0x0000000074A9E000-0x0000000074A9F000-memory.dmp

    Filesize

    4KB

  • memory/2408-1-0x0000000000DD0000-0x0000000000E42000-memory.dmp

    Filesize

    456KB

  • memory/2408-2-0x0000000074A90000-0x000000007517E000-memory.dmp

    Filesize

    6.9MB

  • memory/2408-3-0x0000000074A9E000-0x0000000074A9F000-memory.dmp

    Filesize

    4KB

  • memory/2408-4-0x0000000074A90000-0x000000007517E000-memory.dmp

    Filesize

    6.9MB