Resubmissions

06/08/2024, 15:57

240806-td7vhatbkl 3

06/08/2024, 15:57

240806-tdwr8starq 3

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/08/2024, 15:57

General

  • Target

    DrvLdr.exe

  • Size

    367KB

  • MD5

    dc381abcde0ab105398640d991697d6a

  • SHA1

    76e4a42d757b37e56b7840f16e3d111b23eb20a4

  • SHA256

    80bd268b7b89d3e523bb2661b7537435ee7f3ab332f8a3dde7442024adc278de

  • SHA512

    50c83e6facf54f30acf449ae72950b8e1627aab406b8c804c276a451f3bae026a4979a059771866fa5bfb1bf0828ef1e762c8601c1a6636dc2eb7188ef7f71cc

  • SSDEEP

    6144:ceHy0LXWxxDmyxo0S+rXjnNvDlYBRnQFiwbtcNWVRCu5rp:cYLX0BmyxrS+7lmAVRCuR

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DrvLdr.exe
    "C:\Users\Admin\AppData\Local\Temp\DrvLdr.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads