Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21-01-2025 18:57

General

  • Target

    OneclickTools/OOshutup10/OOSU10.exe

  • Size

    1.9MB

  • MD5

    4803e06db91fdb8b6d1b65c0010d2f87

  • SHA1

    f6d68a7dcc9c46e663f586341e8ba8d1be6b0f9c

  • SHA256

    beb7becc38ccc7ed37c47fe607b25a966a5f71aabd36ab945c3cba15451dfa7b

  • SHA512

    f34195e4dd2b9a0dc4847e94547b3b4f0ee13009878f0e88954e6a070234b902814a7bdc018782cbaddb52e31e19f30bc2273d1b2ed1071f0695563e070c58c6

  • SSDEEP

    49152:zE6D5EyNuGVUJEJTJxJROfOrV3rukAanKZCWumEjlGLsmt8MR+zh:TykAWKZCfmMMR+l

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OneclickTools\OOshutup10\OOSU10.exe
    "C:\Users\Admin\AppData\Local\Temp\OneclickTools\OOshutup10\OOSU10.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2076-0-0x000007FEF5573000-0x000007FEF5574000-memory.dmp

    Filesize

    4KB

  • memory/2076-1-0x0000000000D50000-0x0000000000F40000-memory.dmp

    Filesize

    1.9MB

  • memory/2076-2-0x0000000000250000-0x000000000027C000-memory.dmp

    Filesize

    176KB

  • memory/2076-3-0x000000001AD80000-0x000000001AE26000-memory.dmp

    Filesize

    664KB

  • memory/2076-4-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/2076-5-0x0000000000410000-0x000000000042A000-memory.dmp

    Filesize

    104KB

  • memory/2076-6-0x0000000000430000-0x000000000043A000-memory.dmp

    Filesize

    40KB

  • memory/2076-7-0x0000000000430000-0x000000000043A000-memory.dmp

    Filesize

    40KB

  • memory/2076-8-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/2076-9-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/2076-10-0x000007FEF5573000-0x000007FEF5574000-memory.dmp

    Filesize

    4KB

  • memory/2076-11-0x000007FEF5570000-0x000007FEF5F5C000-memory.dmp

    Filesize

    9.9MB

  • memory/2076-12-0x0000000000430000-0x000000000043A000-memory.dmp

    Filesize

    40KB

  • memory/2076-13-0x0000000000430000-0x000000000043A000-memory.dmp

    Filesize

    40KB