Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 08:49

General

  • Target

    2024-06-14_7a2a1c39dea038eb43d4fc97b7a8e504_masscan.exe

  • Size

    149KB

  • MD5

    7a2a1c39dea038eb43d4fc97b7a8e504

  • SHA1

    1576e638090c868b4c041838fe24eb59b3b776e3

  • SHA256

    731cbd9911b2c173d298849639c44a68d4797ede4584bf10af775b2861dc4523

  • SHA512

    01618f97738d9d0f6a7c1ce3597d16b91e150999aebca8e84d6fdf1226da34136261d89391429c0584a5140fe8080c8c8830aa961d28e61d4c3e0f358801b892

  • SSDEEP

    3072:WANrta71Nd8oYe/3LNX9v+ajnXFp4kElSgk9:L3aXdKeh9vLXCk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-14_7a2a1c39dea038eb43d4fc97b7a8e504_masscan.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-14_7a2a1c39dea038eb43d4fc97b7a8e504_masscan.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1688-0-0x000007FEF59BE000-0x000007FEF59BF000-memory.dmp

          Filesize

          4KB

        • memory/1688-1-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB

        • memory/1688-2-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB

        • memory/1688-3-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB

        • memory/1688-4-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB

        • memory/1688-5-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB

        • memory/1688-6-0x000007FEF5700000-0x000007FEF609D000-memory.dmp

          Filesize

          9.6MB