Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2022, 14:55

General

  • Target

    c46134546cb8ecea52acf29f7e0afdfc2df892df2bf745423ca90140e19e684f.exe

  • Size

    788KB

  • MD5

    062f4114553663d9c7367a19e2ed38f0

  • SHA1

    f990329c0bc20869f8b0ceb2aff504883964f422

  • SHA256

    c46134546cb8ecea52acf29f7e0afdfc2df892df2bf745423ca90140e19e684f

  • SHA512

    030f69cc2292af07c7a921c06572321f84c5f2b83f2388a5ee0578a9f4a65ba553bdfa49d21290e11733b407f2214aad0c842e393a43c6c75b8bbb51b4eab3d1

  • SSDEEP

    12288:KSP2Vu2On5XQlE983JNsUDvlkd73hS3n8H5PGFAyG/Q7wvs:F/2On5XakphS305P4An/90

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 17 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c46134546cb8ecea52acf29f7e0afdfc2df892df2bf745423ca90140e19e684f.exe
    "C:\Users\Admin\AppData\Local\Temp\c46134546cb8ecea52acf29f7e0afdfc2df892df2bf745423ca90140e19e684f.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\dfs6B42.tmp

          Filesize

          537KB

          MD5

          ff7eef4dfcc3c54deb1bb962d39b5ad9

          SHA1

          7125758b5088e41160ae6d04a30ed20b842fdc7b

          SHA256

          65534417c3d94effdc940ee2cbcc57adb81b00f9584a4f3f4cc6f5d5f9ed18a9

          SHA512

          e0cfcd65d21dc8094782a09202ca26365d15c258992cc96045760a2393c979cc3db0236572efd3ae634fab48bb85557db12e07740687e8c69706d13d4682e142

        • C:\Users\Admin\AppData\Local\Temp\dfs6B42.tmp

          Filesize

          537KB

          MD5

          ff7eef4dfcc3c54deb1bb962d39b5ad9

          SHA1

          7125758b5088e41160ae6d04a30ed20b842fdc7b

          SHA256

          65534417c3d94effdc940ee2cbcc57adb81b00f9584a4f3f4cc6f5d5f9ed18a9

          SHA512

          e0cfcd65d21dc8094782a09202ca26365d15c258992cc96045760a2393c979cc3db0236572efd3ae634fab48bb85557db12e07740687e8c69706d13d4682e142

        • memory/2400-134-0x0000000004C80000-0x0000000004D0C000-memory.dmp

          Filesize

          560KB

        • memory/2400-135-0x00000000056B0000-0x0000000005C54000-memory.dmp

          Filesize

          5.6MB

        • memory/2400-136-0x0000000005030000-0x00000000050C2000-memory.dmp

          Filesize

          584KB

        • memory/2400-137-0x0000000005100000-0x000000000510A000-memory.dmp

          Filesize

          40KB

        • memory/2400-138-0x00000000091A0000-0x0000000009206000-memory.dmp

          Filesize

          408KB

        • memory/2400-139-0x000000000E1E0000-0x000000000E986000-memory.dmp

          Filesize

          7.6MB