Analysis

  • max time kernel
    100s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2022 23:35

General

  • Target

    Launcher.bat.exe

  • Size

    435KB

  • MD5

    f7722b62b4014e0c50adfa9d60cafa1c

  • SHA1

    f31c17e0453f27be85730e316840f11522ddec3e

  • SHA256

    ccc8538dd62f20999717e2bbab58a18973b938968d699154df9233698a899efa

  • SHA512

    7fe6a32f1a69ffdae5edc450a1fcbaed5eac805cb43abd86c5c54de59219f801c71d2a0c816ac182a5bfa568196463a351a86ac8d782423cab1e15648e5af8e4

  • SSDEEP

    6144:vB22GpHwJkrWwO9sV1yZywi/PzNKXzJ7BapCK5d3klRzULOnWyjLsPhAQzqO:vLZWrW2KXzJ4pdd3klnnWosPhnzq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Launcher.bat.exe
    "C:\Users\Admin\AppData\Local\Temp\Launcher.bat.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5092-132-0x000001B8A8A20000-0x000001B8A8A42000-memory.dmp

    Filesize

    136KB

  • memory/5092-133-0x000001B8A9860000-0x000001B8A98A4000-memory.dmp

    Filesize

    272KB

  • memory/5092-134-0x000001B8A9930000-0x000001B8A99A6000-memory.dmp

    Filesize

    472KB

  • memory/5092-135-0x00007FFF7BA10000-0x00007FFF7C4D1000-memory.dmp

    Filesize

    10.8MB

  • memory/5092-136-0x00007FFF7BA10000-0x00007FFF7C4D1000-memory.dmp

    Filesize

    10.8MB