Analysis

  • max time kernel
    144s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/03/2023, 07:54

General

  • Target

    3550755b36a4944a5dfdcf54c092628e.exe

  • Size

    619KB

  • MD5

    3550755b36a4944a5dfdcf54c092628e

  • SHA1

    d4d1538ac728e6a81e5f938b17d30d1377ab4352

  • SHA256

    520beb909a622e4a50bcbae7a43194deda3478a4fe2c4e4c81d939761076e23f

  • SHA512

    4d7e402a2694346fe7c41dda0b29272ae267b779683ab152f513123354203df4f031768a9d93035e17ddb4ad3a78581c2a5023ecc4d8f140eb0068f7a53073d0

  • SSDEEP

    12288:zGdN/gKE0nbPbwFyyst+OMFWvBvWiv8i1w4buNNAXK7wAT/jNiaTMsoT:zcxgMnbPsF3st+OMFWvBvWiv8iK46NiT

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3550755b36a4944a5dfdcf54c092628e.exe
    "C:\Users\Admin\AppData\Local\Temp\3550755b36a4944a5dfdcf54c092628e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4464-133-0x0000000000AC0000-0x0000000000AD6000-memory.dmp

    Filesize

    88KB

  • memory/4464-134-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-135-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-136-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-137-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-138-0x00000000054D0000-0x000000000556C000-memory.dmp

    Filesize

    624KB

  • memory/4464-139-0x0000000005B20000-0x00000000060C4000-memory.dmp

    Filesize

    5.6MB

  • memory/4464-140-0x00000000055E0000-0x0000000005646000-memory.dmp

    Filesize

    408KB

  • memory/4464-141-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-142-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-143-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB

  • memory/4464-144-0x0000000004E60000-0x0000000004E70000-memory.dmp

    Filesize

    64KB