Analysis

  • max time kernel
    156s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-09-2022 12:16

General

  • Target

    8715dd02958f87015a57f0b7d07ccdaef476b0563234c7a48b85c67d50681624.exe

  • Size

    1.2MB

  • MD5

    bcf653b690c8216fdf261f3044cb3ae4

  • SHA1

    e0191a11376e0e71fa85ab086290124b12dd42ba

  • SHA256

    8715dd02958f87015a57f0b7d07ccdaef476b0563234c7a48b85c67d50681624

  • SHA512

    884aab17bd951384ff2f039212785f64ffcf07059e0614e7cf65722d318e2b87f2568324129d1f1a86940f5ec7def74b174d69786c18fad187d2ceada3ed87e3

  • SSDEEP

    24576:X2UlQci3khFwLhaOUYo8N3ZbXBFO5ZDSiTbJ7w:RGfaw1aOU/orFO5tV7w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8715dd02958f87015a57f0b7d07ccdaef476b0563234c7a48b85c67d50681624.exe
    "C:\Users\Admin\AppData\Local\Temp\8715dd02958f87015a57f0b7d07ccdaef476b0563234c7a48b85c67d50681624.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1336-132-0x000002E2E7980000-0x000002E2E79B2000-memory.dmp

    Filesize

    200KB

  • memory/1336-133-0x00007FF87D9B0000-0x00007FF87E471000-memory.dmp

    Filesize

    10.8MB

  • memory/1336-134-0x000002E2E7910000-0x000002E2E7918000-memory.dmp

    Filesize

    32KB

  • memory/1336-135-0x00007FF87D9B0000-0x00007FF87E471000-memory.dmp

    Filesize

    10.8MB

  • memory/1336-136-0x000002E2E79F0000-0x000002E2E7A28000-memory.dmp

    Filesize

    224KB

  • memory/1336-137-0x000002E2E7920000-0x000002E2E792E000-memory.dmp

    Filesize

    56KB