Analysis

  • max time kernel
    57s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    05-11-2024 15:23

General

  • Target

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe

  • Size

    8KB

  • MD5

    fd1489c65b0d75f4cdc7b1f2634b5359

  • SHA1

    f8431629d627f8dc13ca486e8b5d0a46f47d46fd

  • SHA256

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea

  • SHA512

    e4fc02e1567e188caaf67ccd3a068e6b9db1c20b22a6949ec9ffd9d1a037afe36d744ac8c94a0fd5df55c7e2a51c10a9bcf05c3274175c8296cf16be718a99a2

  • SSDEEP

    96:a9hcOxiPwrltSJ1+pa/4/pzzkZj6tfCIQJ25FsfQungwffm2gbFnU:avc4rvpPd4Z+t6BJyungwffPZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe
    "C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-0-0x000007FEF52A3000-0x000007FEF52A4000-memory.dmp

    Filesize

    4KB

  • memory/2040-1-0x0000000000150000-0x0000000000156000-memory.dmp

    Filesize

    24KB

  • memory/2040-2-0x000007FEF52A0000-0x000007FEF5C8C000-memory.dmp

    Filesize

    9.9MB

  • memory/2040-3-0x000007FEF52A3000-0x000007FEF52A4000-memory.dmp

    Filesize

    4KB

  • memory/2040-4-0x000007FEF52A0000-0x000007FEF5C8C000-memory.dmp

    Filesize

    9.9MB