Analysis

  • max time kernel
    184s
  • max time network
    197s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2022 01:08

General

  • Target

    ca3182822da3b874aa7a7ebc42d273bcc1a8440e7c63107c92685a6d7d8eeb3e.exe

  • Size

    63KB

  • MD5

    7e67e3d08a26c39fbee9a21570480a62

  • SHA1

    109cd8772039a3b8febc0ac145ae2a5e3ee8a349

  • SHA256

    ca3182822da3b874aa7a7ebc42d273bcc1a8440e7c63107c92685a6d7d8eeb3e

  • SHA512

    f175304e1af35a279f0b8b0c985b3d89ac5dd02f7ce1a3dff55fb674180522b8572f3cd1f36be57901551d379605128510cb15f8436a39e705ceefcad310c9e5

  • SSDEEP

    1536:bq824LfMiS6hqYG93U4QeBb9AGNZXjTQbe4fUa7hrNxurBdpk:bxLUxPQeBJDjMbeQ1rfqBk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ca3182822da3b874aa7a7ebc42d273bcc1a8440e7c63107c92685a6d7d8eeb3e.exe
    "C:\Users\Admin\AppData\Local\Temp\ca3182822da3b874aa7a7ebc42d273bcc1a8440e7c63107c92685a6d7d8eeb3e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4192-132-0x0000000000400000-0x0000000000413000-memory.dmp

    Filesize

    76KB

  • memory/4192-133-0x0000000000400000-0x0000000000413000-memory.dmp

    Filesize

    76KB

  • memory/4192-134-0x0000000000400000-0x0000000000413000-memory.dmp

    Filesize

    76KB