Analysis

  • max time kernel
    163s
  • max time network
    177s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2022 15:53

General

  • Target

    b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe

  • Size

    5.3MB

  • MD5

    e3b0df2abc353670ccd5b2c53d8b8ebe

  • SHA1

    bf47983fa8022a5e4a44e0b300660fab01ce6e29

  • SHA256

    b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f

  • SHA512

    1c82e23a59fb8b3e920f10b701cabb01ba95ae9ab7aafd86830ae482ef259d216af3d518f65d11ff4f950082edc07c79407e34fc7cd2f25643afa1fbc4cc48a1

  • SSDEEP

    49152:IIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNF2He74cdr27lZw77LQ0soNcIi:RblPUmHzc4wWHzcAwHblPU

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe
    "C:\Users\Admin\AppData\Local\Temp\b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1560-132-0x00000259377C0000-0x0000025937D16000-memory.dmp

    Filesize

    5.3MB

  • memory/1560-133-0x00007FFE98510000-0x00007FFE98FD1000-memory.dmp

    Filesize

    10.8MB

  • memory/1560-134-0x0000025953AB0000-0x0000025953ABA000-memory.dmp

    Filesize

    40KB

  • memory/1560-135-0x0000025953AC0000-0x0000025953AC8000-memory.dmp

    Filesize

    32KB

  • memory/1560-136-0x0000025953AE0000-0x0000025953AE8000-memory.dmp

    Filesize

    32KB

  • memory/1560-137-0x0000025953AF0000-0x0000025953AF8000-memory.dmp

    Filesize

    32KB

  • memory/1560-138-0x0000025953B00000-0x0000025953B08000-memory.dmp

    Filesize

    32KB

  • memory/1560-139-0x0000025953B10000-0x0000025953B18000-memory.dmp

    Filesize

    32KB

  • memory/1560-140-0x0000025953B20000-0x0000025953B28000-memory.dmp

    Filesize

    32KB

  • memory/1560-141-0x0000025953B30000-0x0000025953B38000-memory.dmp

    Filesize

    32KB

  • memory/1560-142-0x0000025953B40000-0x0000025953B48000-memory.dmp

    Filesize

    32KB

  • memory/1560-143-0x0000025956050000-0x0000025956058000-memory.dmp

    Filesize

    32KB

  • memory/1560-144-0x00007FFE98510000-0x00007FFE98FD1000-memory.dmp

    Filesize

    10.8MB

  • memory/1560-145-0x0000025958410000-0x0000025958448000-memory.dmp

    Filesize

    224KB

  • memory/1560-146-0x0000025958390000-0x000002595839E000-memory.dmp

    Filesize

    56KB