Analysis

  • max time kernel
    91s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-12-2022 20:59

General

  • Target

    aTube_Catcher_v4.06.820.15.30.exe

  • Size

    1.1MB

  • MD5

    bf1c147ca45943073d8b02ce2491e787

  • SHA1

    ebeea33ef69b6002504ee42c04d7b2ed44b312ff

  • SHA256

    504ec3e3b3c8d6d294ced5ec1cf840f2b973ab823a47d167800e51cfa635af47

  • SHA512

    273e1bf12efd15714b4d3e2768349f5b00b91abc7d6d65814bc8410a168161b8d87cc2ca65f1a3371ed0f2571986dff8ab861a11522334aa439c151a0a7d157d

  • SSDEEP

    24576:vKAeRQi7A0S+K7VQy6yXiJC0ABKPamoLi+t9RQAP1Ehl3qw0S+K7VQy6yXiJC0Az:vLemmA0S+K7VQy6yXiJC0ABKXii+t9Rh

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aTube_Catcher_v4.06.820.15.30.exe
    "C:\Users\Admin\AppData\Local\Temp\aTube_Catcher_v4.06.820.15.30.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4916-132-0x0000000000D40000-0x0000000000E5E000-memory.dmp

    Filesize

    1.1MB

  • memory/4916-133-0x000000001D2D0000-0x000000001D7F8000-memory.dmp

    Filesize

    5.2MB

  • memory/4916-134-0x000000001CEF0000-0x000000001CF40000-memory.dmp

    Filesize

    320KB

  • memory/4916-135-0x000000001D000000-0x000000001D0B2000-memory.dmp

    Filesize

    712KB

  • memory/4916-136-0x000000001CEC0000-0x000000001CED2000-memory.dmp

    Filesize

    72KB

  • memory/4916-137-0x000000001CF40000-0x000000001CF60000-memory.dmp

    Filesize

    128KB

  • memory/4916-138-0x000000001CFA0000-0x000000001CFD2000-memory.dmp

    Filesize

    200KB

  • memory/4916-139-0x000000001CF60000-0x000000001CF7E000-memory.dmp

    Filesize

    120KB

  • memory/4916-141-0x00007FFD51160000-0x00007FFD51C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4916-140-0x000000001CF80000-0x000000001CF9A000-memory.dmp

    Filesize

    104KB

  • memory/4916-142-0x000000001C7B9000-0x000000001C7BF000-memory.dmp

    Filesize

    24KB

  • memory/4916-143-0x0000000022460000-0x0000000022464000-memory.dmp

    Filesize

    16KB

  • memory/4916-144-0x00007FFD51160000-0x00007FFD51C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4916-145-0x0000000022460000-0x0000000022464000-memory.dmp

    Filesize

    16KB