Analysis

  • max time kernel
    182s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 19:43

General

  • Target

    9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c.exe

  • Size

    317KB

  • MD5

    d46c47543ab771c8d6bd2d7c9ba853a3

  • SHA1

    b339decb0fd779a0a7c192d321aec1017808e28e

  • SHA256

    9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c

  • SHA512

    e601d8b012d81409005b3b7aa002b2ce4417ae36f0a62f6dba4fdb592f6e730eafb02d1c5adbdc6db800206204b5b30577366e85f8faa3b719ef0dc574917d8f

  • SSDEEP

    6144:3D8VwwJLvjFAFoqe6jv3gB5HFV7n6kSw8rZuge6Bhk4GuRfk:3D8V7XFAFa6jvQBlnxFnl6Tllk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c.exe
    "C:\Users\Admin\AppData\Local\Temp\9617d4eefc2c16ff7587d7a85c1f52d23053e02632e9cfc27e0a5eb84486f05c.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4068-132-0x00000000008CE000-0x00000000008FF000-memory.dmp

          Filesize

          196KB

        • memory/4068-133-0x0000000000800000-0x000000000083E000-memory.dmp

          Filesize

          248KB

        • memory/4068-134-0x0000000000400000-0x000000000066D000-memory.dmp

          Filesize

          2.4MB

        • memory/4068-135-0x0000000004DA0000-0x0000000005344000-memory.dmp

          Filesize

          5.6MB

        • memory/4068-136-0x0000000005390000-0x0000000005422000-memory.dmp

          Filesize

          584KB

        • memory/4068-137-0x00000000056B0000-0x0000000005CC8000-memory.dmp

          Filesize

          6.1MB

        • memory/4068-138-0x00000000054D0000-0x00000000055DA000-memory.dmp

          Filesize

          1.0MB

        • memory/4068-139-0x0000000005600000-0x0000000005612000-memory.dmp

          Filesize

          72KB

        • memory/4068-140-0x0000000005620000-0x000000000565C000-memory.dmp

          Filesize

          240KB

        • memory/4068-141-0x00000000008CE000-0x00000000008FF000-memory.dmp

          Filesize

          196KB

        • memory/4068-142-0x0000000000800000-0x000000000083E000-memory.dmp

          Filesize

          248KB