Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 12:57

General

  • Target

    13ecafcbe4d9d3990a9794b7062eabb290541189982b190e26a562ea966abf82.exe

  • Size

    5.3MB

  • MD5

    3d18b6bb43e547913f3903261484efbb

  • SHA1

    06737eec37ae743aa5e56cca6cb60b69f9472845

  • SHA256

    13ecafcbe4d9d3990a9794b7062eabb290541189982b190e26a562ea966abf82

  • SHA512

    1310d9be0d62f7cfe405b9361a0ec904e90be8ac71bfe13f961649cb9964bc3d6f1f075de2c6d783fbefe06493631b68e1aac9d13f1075fff393da7276d8fc49

  • SSDEEP

    49152:38QJIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNf2He74cdr27lZw77LQ0sod:vcblPUmHzc4wcHzcAwHblPUQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13ecafcbe4d9d3990a9794b7062eabb290541189982b190e26a562ea966abf82.exe
    "C:\Users\Admin\AppData\Local\Temp\13ecafcbe4d9d3990a9794b7062eabb290541189982b190e26a562ea966abf82.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2204-0-0x000007FEF5953000-0x000007FEF5954000-memory.dmp

    Filesize

    4KB

  • memory/2204-1-0x0000000000270000-0x00000000007C8000-memory.dmp

    Filesize

    5.3MB

  • memory/2204-2-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB

  • memory/2204-3-0x0000000000250000-0x0000000000258000-memory.dmp

    Filesize

    32KB

  • memory/2204-7-0x0000000000260000-0x000000000026E000-memory.dmp

    Filesize

    56KB

  • memory/2204-6-0x0000000002800000-0x0000000002876000-memory.dmp

    Filesize

    472KB

  • memory/2204-5-0x00000000007D0000-0x0000000000802000-memory.dmp

    Filesize

    200KB

  • memory/2204-4-0x000000001B110000-0x000000001B260000-memory.dmp

    Filesize

    1.3MB

  • memory/2204-12-0x0000000000B30000-0x0000000000B40000-memory.dmp

    Filesize

    64KB

  • memory/2204-13-0x0000000000B40000-0x0000000000B4A000-memory.dmp

    Filesize

    40KB

  • memory/2204-11-0x000000001B3A0000-0x000000001B422000-memory.dmp

    Filesize

    520KB

  • memory/2204-10-0x0000000000B20000-0x0000000000B30000-memory.dmp

    Filesize

    64KB

  • memory/2204-9-0x0000000000B10000-0x0000000000B1A000-memory.dmp

    Filesize

    40KB

  • memory/2204-8-0x0000000000800000-0x000000000080C000-memory.dmp

    Filesize

    48KB

  • memory/2204-14-0x0000000000B50000-0x0000000000B5A000-memory.dmp

    Filesize

    40KB

  • memory/2204-15-0x0000000000B60000-0x0000000000B68000-memory.dmp

    Filesize

    32KB

  • memory/2204-17-0x0000000002530000-0x000000000253A000-memory.dmp

    Filesize

    40KB

  • memory/2204-16-0x0000000002530000-0x000000000253A000-memory.dmp

    Filesize

    40KB

  • memory/2204-18-0x0000000002540000-0x0000000002548000-memory.dmp

    Filesize

    32KB

  • memory/2204-19-0x0000000002530000-0x0000000002538000-memory.dmp

    Filesize

    32KB

  • memory/2204-20-0x00000000026D0000-0x00000000026D8000-memory.dmp

    Filesize

    32KB

  • memory/2204-21-0x00000000026E0000-0x00000000026E8000-memory.dmp

    Filesize

    32KB

  • memory/2204-22-0x0000000002770000-0x0000000002778000-memory.dmp

    Filesize

    32KB

  • memory/2204-23-0x0000000002870000-0x0000000002878000-memory.dmp

    Filesize

    32KB

  • memory/2204-24-0x000000001AD00000-0x000000001AD08000-memory.dmp

    Filesize

    32KB

  • memory/2204-25-0x000007FEF5953000-0x000007FEF5954000-memory.dmp

    Filesize

    4KB

  • memory/2204-26-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB

  • memory/2204-28-0x0000000002530000-0x000000000253A000-memory.dmp

    Filesize

    40KB

  • memory/2204-27-0x0000000002530000-0x000000000253A000-memory.dmp

    Filesize

    40KB

  • memory/2204-29-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB

  • memory/2204-30-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB

  • memory/2204-31-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB

  • memory/2204-32-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

    Filesize

    9.9MB