f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa

Analysis

max time kernel
95s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 13:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
Size

440KB
MD5

6c8c79f82880de0d8749cf72d9db6df0
SHA1

7b8eef4ef411ac0bc098875e020a94fa2cf2a626
SHA256

f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa
SHA512

3cb1ffab22dfc8c494b87eee19a44d287854a024dbbdfc88d397f553f471b2e027f05e7d38b30f00655f2d71eb08c40f146ba1aaef5d5c540ef8364b337d55ab
SSDEEP

12288:HDuOVfDM/w+XWtCWzdw8syqyDp8L25PXbxQng8teF:jBaWCWhDGK5tQg7

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4492 set thread context of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86
PID 4492 wrote to memory of 3040	4492	f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe	86

C:\Users\Admin\AppData\Local\Temp\f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
"C:\Users\Admin\AppData\Local\Temp\f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Users\Admin\AppData\Local\Temp\f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
  C:\Users\Admin\AppData\Local\Temp\f54d2c9a92c186e7f4543e23699718e7d0ab46528af1dd744fa73df2b749aaaa.exe
  2⤵
  PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3040-191-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3040-195-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3040-197-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/4492-132-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download
memory/4492-133-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-136-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download
memory/4492-137-0x0000000000540000-0x0000000000544000-memory.dmp

Filesize
16KB

Download
memory/4492-138-0x00000000021E0000-0x0000000002219000-memory.dmp

Filesize
228KB

Download
memory/4492-139-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-140-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-141-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-142-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-143-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-144-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-145-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-146-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-147-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-149-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-150-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-148-0x0000000074C80000-0x0000000075231000-memory.dmp

Filesize
5.7MB

Download
memory/4492-152-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-153-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-151-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-154-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-155-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-156-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-157-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-158-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-159-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-160-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-161-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-162-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-163-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-165-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-164-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-166-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-167-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-168-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-169-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-170-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-171-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-172-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-173-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-175-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-174-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-178-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-182-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-181-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-180-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-179-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-177-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-183-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-185-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-184-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-186-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-176-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-187-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-188-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-189-0x0000000002390000-0x00000000023DE000-memory.dmp

Filesize
312KB

Download
memory/4492-193-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download
memory/4492-194-0x00000000021E0000-0x0000000002219000-memory.dmp

Filesize
228KB

Download
memory/4492-196-0x0000000074C80000-0x0000000075231000-memory.dmp

Filesize
5.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads