Analysis

  • max time kernel
    225s
  • max time network
    298s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    15-01-2023 23:31

General

  • Target

    FrostyModManager.exe

  • Size

    506KB

  • MD5

    ce2e89ab7ba7e003af3feb74ec0d1a20

  • SHA1

    6861071664db9fd994d6c4bbddb5e2be192a9e98

  • SHA256

    8fcdb7659bc77b23f374e6eb89427c8dda7727a25c8a8bca3bdf494fd1c801db

  • SHA512

    9044e40e37c37d1ffac9890d7bf1a7093c8043231fd49945d38beee849b26cdccd2c20e3d7af6d2bd096e125776b1b8a28dad385eb468bf49d0edb6d7c74710c

  • SSDEEP

    3072:8+Uv+M/88jAku6tIUpoHopGg1DSnACXdS2YUFsviH8zQq/fgSR0pm/fOiC5c2r:VUvpBOE1OnHXYUsaH8zf/ISR0pm/Gy2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe
    "C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1000-132-0x000002033CFC0000-0x000002033D044000-memory.dmp
    Filesize

    528KB

  • memory/1000-133-0x00000203592D0000-0x00000203598BE000-memory.dmp
    Filesize

    5.9MB

  • memory/1000-134-0x0000020358F80000-0x0000020359212000-memory.dmp
    Filesize

    2.6MB

  • memory/1000-135-0x00000203599D0000-0x0000020359AD2000-memory.dmp
    Filesize

    1.0MB

  • memory/1000-136-0x00007FFAA5B70000-0x00007FFAA6631000-memory.dmp
    Filesize

    10.8MB

  • memory/1000-137-0x0000020358D10000-0x0000020358D2C000-memory.dmp
    Filesize

    112KB

  • memory/1000-138-0x000002033D430000-0x000002033D43E000-memory.dmp
    Filesize

    56KB

  • memory/1000-139-0x000002033ED20000-0x000002033ED28000-memory.dmp
    Filesize

    32KB

  • memory/1000-141-0x0000020358D50000-0x0000020358D6A000-memory.dmp
    Filesize

    104KB

  • memory/1000-140-0x0000020358E90000-0x0000020358ED2000-memory.dmp
    Filesize

    264KB

  • memory/1000-142-0x0000020359C50000-0x0000020359D00000-memory.dmp
    Filesize

    704KB

  • memory/1000-143-0x0000020358F30000-0x0000020358F52000-memory.dmp
    Filesize

    136KB

  • memory/1000-144-0x0000020359270000-0x00000203592B6000-memory.dmp
    Filesize

    280KB

  • memory/1000-146-0x000002035C560000-0x000002035C568000-memory.dmp
    Filesize

    32KB

  • memory/1000-145-0x000002035C570000-0x000002035C590000-memory.dmp
    Filesize

    128KB

  • memory/1000-147-0x000002035E8F0000-0x000002035E928000-memory.dmp
    Filesize

    224KB

  • memory/1000-148-0x000002035E8C0000-0x000002035E8CE000-memory.dmp
    Filesize

    56KB

  • memory/1000-149-0x00007FFAA5B70000-0x00007FFAA6631000-memory.dmp
    Filesize

    10.8MB