Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 21:41

General

  • Target

    a187b0b66f0488e4d22c79653782e9762978419cbd9f957557448eb6bb9ae4e2.exe

  • Size

    1.1MB

  • MD5

    0afed65bd91a981875741eac77838a7b

  • SHA1

    758997f10df3c3fbcb96dd1d8a8ac0e1493b4b51

  • SHA256

    a187b0b66f0488e4d22c79653782e9762978419cbd9f957557448eb6bb9ae4e2

  • SHA512

    76b31819b33aed1241ae65838afe0e543d1791a837d95c85a938ff3c483fa0c351c5a1b78aa94659d30813f0b091ea8fe279eaa99e3975d9b049285d6b23a93f

  • SSDEEP

    24576:P2qJ8q+JnWUqFa1FNB6bI2Oyx0EvmJvfHWmAjoX1b:O7qeWUJH6s2DO3vc

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a187b0b66f0488e4d22c79653782e9762978419cbd9f957557448eb6bb9ae4e2.exe
    "C:\Users\Admin\AppData\Local\Temp\a187b0b66f0488e4d22c79653782e9762978419cbd9f957557448eb6bb9ae4e2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1200-132-0x0000000000400000-0x000000000049C000-memory.dmp

    Filesize

    624KB

  • memory/1200-133-0x0000000000400000-0x0000000000402000-memory.dmp

    Filesize

    8KB

  • memory/1200-134-0x0000000000400000-0x0000000000458000-memory.dmp

    Filesize

    352KB

  • memory/1200-135-0x0000000004B80000-0x0000000005124000-memory.dmp

    Filesize

    5.6MB

  • memory/1200-136-0x0000000005190000-0x0000000005222000-memory.dmp

    Filesize

    584KB

  • memory/1200-137-0x0000000005250000-0x0000000005868000-memory.dmp

    Filesize

    6.1MB

  • memory/1200-138-0x00000000058D0000-0x0000000005936000-memory.dmp

    Filesize

    408KB

  • memory/1200-139-0x0000000005AA0000-0x0000000005AAA000-memory.dmp

    Filesize

    40KB

  • memory/1200-140-0x0000000000400000-0x000000000049C000-memory.dmp

    Filesize

    624KB

  • memory/1200-141-0x000000007FE40000-0x000000007FE48000-memory.dmp

    Filesize

    32KB

  • memory/1200-142-0x00000000090C0000-0x00000000090D2000-memory.dmp

    Filesize

    72KB