Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 13:55

General

  • Target

    a75938a7c7f8020ebe39a1986a6449bd538d4b732dcf730dbb825e888318eb6a.exe

  • Size

    2.8MB

  • MD5

    7b5ab10e49df73645444c5d340d11518

  • SHA1

    8065f1709f32b77bde4b3e819119f971e489abac

  • SHA256

    a75938a7c7f8020ebe39a1986a6449bd538d4b732dcf730dbb825e888318eb6a

  • SHA512

    fd5e3b18d8bf08f18ecddf0116e7d0c7481c520a0f69c8ce96e6376f2f37896fb5c2c0606eadc6663dd472427e478a84d6f348112ec642ff6fd2c2cf6e8442e9

  • SSDEEP

    49152:pBPvqOI0DtsKXfacWiz6P1WdaIvlHLrPMCDwq0nLetxDmg27RnWGj:p9iFYttvaiz6P1WdaI9HLhwq0nED5273

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a75938a7c7f8020ebe39a1986a6449bd538d4b732dcf730dbb825e888318eb6a.exe
    "C:\Users\Admin\AppData\Local\Temp\a75938a7c7f8020ebe39a1986a6449bd538d4b732dcf730dbb825e888318eb6a.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2624-0-0x0000000000400000-0x00000000006D4000-memory.dmp

          Filesize

          2.8MB

        • memory/2624-1-0x00000000006E0000-0x0000000000747000-memory.dmp

          Filesize

          412KB

        • memory/2624-6-0x00000000006E0000-0x0000000000747000-memory.dmp

          Filesize

          412KB

        • memory/2624-11-0x0000000000400000-0x00000000006D4000-memory.dmp

          Filesize

          2.8MB