Analysis

  • max time kernel
    117s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/06/2023, 16:55

General

  • Target

    SecuriteInfo.com.MSIL.GenKryptik.GLCC.tr.dldr.17643.4288.exe

  • Size

    11.3MB

  • MD5

    0de0384a9fb6c83017e60dd2521faef5

  • SHA1

    bfb60c04f1f7918cd91bb524cb1c434e4c911a2b

  • SHA256

    c38e1ab86b9c9eb0230a11aa218708fcc5c8c6a1450bc87fabb7f731f9fab362

  • SHA512

    02db88233d8a73fd1e00bd4b62246aa04abf883a85e4e6d84a49c6915a6604049d15c6593935022edf930ca9c6db2e8cb8520d45b8fc364833840d230a4815f8

  • SSDEEP

    196608:qBRLQP2+uCK3F7Y111la0gm6E7q5PlVT7s2a8Dznk4VMcZr1ketRysN3UNhUrBtV:qBRLM2+uCK3F7i3imzCs2nTHMcBCG31P

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.MSIL.GenKryptik.GLCC.tr.dldr.17643.4288.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.MSIL.GenKryptik.GLCC.tr.dldr.17643.4288.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2436-133-0x000001B014AD0000-0x000001B01561A000-memory.dmp

    Filesize

    11.3MB

  • memory/2436-134-0x000001B02FA60000-0x000001B02FA70000-memory.dmp

    Filesize

    64KB

  • memory/2436-135-0x000001B02FA60000-0x000001B02FA70000-memory.dmp

    Filesize

    64KB

  • memory/2436-136-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-137-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-139-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-141-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-143-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-145-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-147-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-149-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-151-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-153-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-155-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-157-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-159-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-161-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-163-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-165-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-167-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-169-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-171-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-173-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-175-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-177-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-179-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-181-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-183-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-185-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-187-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-189-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-191-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-193-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-195-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-197-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-199-0x000001B02FCB0000-0x000001B02FE16000-memory.dmp

    Filesize

    1.4MB

  • memory/2436-1058-0x000001B0159E0000-0x000001B0159E1000-memory.dmp

    Filesize

    4KB