Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 22:32

General

  • Target

    MonInfo.exe

  • Size

    313KB

  • MD5

    e4467a6cdd2f2e097507fa7d901ccd64

  • SHA1

    3280ec0f36d620202aa03c69feaf8f080b45f779

  • SHA256

    37827b0403048c7a777ad7ff2a9f535ef00059e89287af700a070719214e4de7

  • SHA512

    55a32d8488fe51298b74027a4e9a7c9645c1914590e95b0765c81d6d438b14cba3560652e2f182cf0306d5526bd99700309a1c8254f8a5fc6c11a7bad8b3bec9

  • SSDEEP

    6144:Kkaojna1bZmvypNfCl8ps2KR5WFziT4xnPJWR7eN1iVif/L5MZvNEki:Kkfja1V7ClKRKRYNiT6nWeNEV+5MZvN2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MonInfo.exe
    "C:\Users\Admin\AppData\Local\Temp\MonInfo.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3008-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/3008-1-0x0000000000400000-0x00000000004EF000-memory.dmp

    Filesize

    956KB

  • memory/3008-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB