Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    08/11/2024, 14:47

General

  • Target

    file.exe

  • Size

    349KB

  • MD5

    a0e20498bac13d9b370a901610882f82

  • SHA1

    e654ffe53da20163f206cb4f12b11a2b012a1a4a

  • SHA256

    b3c0234f9ddc1f0491dcae04ac4ef320d59b665fd4b863e73b365f0e848500ad

  • SHA512

    11ef23679fc648019248a244c732951b413b23a2294ec4dc9d7a32f40852fdacaa5fc5f6d6c29b0316b230a8c4f4c21b2481dc13bf012ffd23b362271245b8d8

  • SSDEEP

    6144:XKeGZIHGo14D9O0rmGO2d0d18gSwk4X7LXAeIKynOy1+21wl+1Xevlp:aec8Gd9O0rmbfM4XfynOa1wGe

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:2064

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\CabD625.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • memory/2064-0-0x000000007403E000-0x000000007403F000-memory.dmp

          Filesize

          4KB

        • memory/2064-1-0x0000000000940000-0x000000000099E000-memory.dmp

          Filesize

          376KB

        • memory/2064-2-0x00000000041C0000-0x000000000427E000-memory.dmp

          Filesize

          760KB

        • memory/2064-3-0x0000000074030000-0x000000007471E000-memory.dmp

          Filesize

          6.9MB

        • memory/2064-20-0x000000007403E000-0x000000007403F000-memory.dmp

          Filesize

          4KB

        • memory/2064-21-0x0000000074030000-0x000000007471E000-memory.dmp

          Filesize

          6.9MB