Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/08/2022, 02:03

General

  • Target

    C4Loader.exe

  • Size

    2.7MB

  • MD5

    43a0526a928f9daca9c953221406af8e

  • SHA1

    34fdd0d94ecfe8c887ebb164068579013d2c611b

  • SHA256

    88e1fbd4e5494e3c2766300e8bab97edb08f3c7315c3d914b7d8b2dac25f8986

  • SHA512

    9632a96172d6db2d7b0e356a2bb661b397b3c8b380fbe151707322d204cee0ab82abbec4476ce6e43f5dfa67b9ae34d77909fbc966d431898b25dec9fbaea3fd

  • SSDEEP

    49152:Aujo4zjmiVP/bjTRdYey8Pg8clh2bsam8LFl6yJ3O21oV9aZYq:Auc2milfTTYZ8PM756l6y5Bo6qq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\C4Loader.exe
    "C:\Users\Admin\AppData\Local\Temp\C4Loader.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2524-132-0x00000000008B0000-0x0000000000B64000-memory.dmp

    Filesize

    2.7MB

  • memory/2524-133-0x0000000005DA0000-0x0000000006344000-memory.dmp

    Filesize

    5.6MB

  • memory/2524-134-0x0000000005550000-0x00000000055E2000-memory.dmp

    Filesize

    584KB

  • memory/2524-135-0x0000000006380000-0x000000000638A000-memory.dmp

    Filesize

    40KB

  • memory/2524-136-0x000000000AA70000-0x000000000AAAC000-memory.dmp

    Filesize

    240KB