Analysis

  • max time kernel
    153s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 21:10

General

  • Target

    fd1a4b7abeecb3d973a8f7cd8877bb54398f54e9fae23349f3ccd081070be48c.exe

  • Size

    149KB

  • MD5

    906ce109145e8b19fa397c6cce865860

  • SHA1

    bec732a25fb27ec2fcd83f76127a4edc28cec58d

  • SHA256

    fd1a4b7abeecb3d973a8f7cd8877bb54398f54e9fae23349f3ccd081070be48c

  • SHA512

    9f81411a31ae04702b823709554d9b7219e206d4411cbaad7cac4323e1a6ba779fc7450b1314734ce5ce4805ae05293d874afbc1bb44e7fafef333309754e5a3

  • SSDEEP

    3072:/wgU+TigKCVyHB4P01rB+PctUf4aIrA9m5KEym1wN:oxg14H+uEPcg9m5G3

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd1a4b7abeecb3d973a8f7cd8877bb54398f54e9fae23349f3ccd081070be48c.exe
    "C:\Users\Admin\AppData\Local\Temp\fd1a4b7abeecb3d973a8f7cd8877bb54398f54e9fae23349f3ccd081070be48c.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1408

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1408-132-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB

        • memory/1408-133-0x0000000075230000-0x00000000757E1000-memory.dmp

          Filesize

          5.7MB

        • memory/1408-134-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB

        • memory/1408-135-0x0000000075230000-0x00000000757E1000-memory.dmp

          Filesize

          5.7MB