Overview

overview

10

Static

static

ce10gm3d.swj.exe

windows7_x64

10

ce10gm3d.swj.exe

windows10-2004_x64

7

Analysis

  • max time kernel
    174s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    21-05-2022 12:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ce10gm3d.swj.exe

  • Size

    427KB

  • MD5

    dce31d2eba49d580496fcb3124397a46

  • SHA1

    93a9faa46033fd2513cdb5f621cd4b7038351867

  • SHA256

    847c47a4c1a5db11dd89626915bb922f8213bb5ab61d449857fbf62660a63dda

  • SHA512

    58340a4253882df7c02518ed41fc12c5aa713e71ec19f0e136b354712dcfe84424960e4edb6bd8e96f0966eda3f0be1a9306b584deb4a477afcbbfec0207e925

Score
7/10

Malware Config

Signatures

  • Drops startup file 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ce10gm3d.swj.exe
    "C:\Users\Admin\AppData\Local\Temp\ce10gm3d.swj.exe"
    1⤵
    • Drops startup file
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3784-130-0x0000000000290000-0x0000000000302000-memory.dmp
    Filesize

    456KB

    Download
  • memory/3784-131-0x00000000051E0000-0x0000000005784000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/3784-132-0x0000000004D40000-0x0000000004DD2000-memory.dmp
    Filesize

    584KB

    Download
  • memory/3784-133-0x00000000069B0000-0x0000000006A4C000-memory.dmp
    Filesize

    624KB

    Download
  • memory/3784-134-0x0000000006C10000-0x0000000006C76000-memory.dmp
    Filesize

    408KB

    Download