Analysis

  • max time kernel
    119s
  • max time network
    115s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13-11-2024 10:18

General

  • Target

    32086647bf7795363d05e36d62f2932178177ffb14b8423975e49411ef0f6615.exe

  • Size

    1.4MB

  • MD5

    f41978c613335d1098a6eeec04c20eb5

  • SHA1

    b68e88b3f1f0ab4e0d91ec69704f8a1d3092f81f

  • SHA256

    32086647bf7795363d05e36d62f2932178177ffb14b8423975e49411ef0f6615

  • SHA512

    06d636de7f766fdbf784fca8ecccc042ef63aebcfb8d52d22a3965f4832d71d88b09177055df025e08c5fb1c878c79fa657348910c9350c20b9cbf185b23d781

  • SSDEEP

    24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcY:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5C

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\32086647bf7795363d05e36d62f2932178177ffb14b8423975e49411ef0f6615.exe
    "C:\Users\Admin\AppData\Local\Temp\32086647bf7795363d05e36d62f2932178177ffb14b8423975e49411ef0f6615.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-0-0x00000000001F0000-0x0000000000200000-memory.dmp

    Filesize

    64KB