Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-04-2023 11:31

General

  • Target

    NitroxLauncher.exe

  • Size

    3.5MB

  • MD5

    e801cd1a9af46b219768d79f7d2a2b98

  • SHA1

    a2e939298aec1770b0079284b5bc275ba9cee517

  • SHA256

    9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c

  • SHA512

    48dee9078223881716bd1360881233b6a99df3c1f6063fe69784e77243ce55e988fea1365184de69b4f1724cd59ac02d6e8deaf7fbf00eae82301122c09e71ee

  • SSDEEP

    98304:fUqYeHg1UsnKLycqQYcDcwuavRfFujF0NpIl:LU18yArhvRfFujaNOl

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3336-133-0x000001F455EE0000-0x000001F45625A000-memory.dmp

    Filesize

    3.5MB

  • memory/3336-134-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-135-0x000001F472390000-0x000001F4723CE000-memory.dmp

    Filesize

    248KB

  • memory/3336-136-0x000001F457FB0000-0x000001F457FD6000-memory.dmp

    Filesize

    152KB

  • memory/3336-137-0x000001F457F80000-0x000001F457F88000-memory.dmp

    Filesize

    32KB

  • memory/3336-138-0x000001F457F90000-0x000001F457F9E000-memory.dmp

    Filesize

    56KB

  • memory/3336-139-0x000001F472450000-0x000001F472472000-memory.dmp

    Filesize

    136KB

  • memory/3336-140-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-141-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-142-0x000001F4726F0000-0x000001F47270C000-memory.dmp

    Filesize

    112KB

  • memory/3336-143-0x000001F472710000-0x000001F472726000-memory.dmp

    Filesize

    88KB

  • memory/3336-144-0x000001F474F80000-0x000001F47503A000-memory.dmp

    Filesize

    744KB

  • memory/3336-145-0x000001F474A90000-0x000001F474A98000-memory.dmp

    Filesize

    32KB

  • memory/3336-146-0x000001F4760F0000-0x000001F476128000-memory.dmp

    Filesize

    224KB

  • memory/3336-147-0x000001F474B20000-0x000001F474B2E000-memory.dmp

    Filesize

    56KB

  • memory/3336-149-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-150-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-151-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-152-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB

  • memory/3336-153-0x000001F4565A0000-0x000001F4565B0000-memory.dmp

    Filesize

    64KB