Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-08-2023 09:43

General

  • Target

    e97617802dd6b284e55f1bde9022d69718c4ccb13f7ba77c31463cd6965c623f.exe

  • Size

    1.1MB

  • MD5

    353c31968d50b68479ebafea2c17029e

  • SHA1

    3388414797a3240b98bc950af62161a1e0330206

  • SHA256

    e97617802dd6b284e55f1bde9022d69718c4ccb13f7ba77c31463cd6965c623f

  • SHA512

    b8d6574cd5e2c1348cb4cd448ccd60fcc29ce6ac960da9057a5baeb1329cc92e44308a123eec22dd7f0fced1903e16299fb0322808e3b572fc610eca254fce70

  • SSDEEP

    12288:+H69eFDCwG/sFcMaRQ0om9pmxb7hzulJ4r1VRinKrDAPJRdgMmmurL5DSyt70Ylb:o66dG/sFcMaRNL9Y5kicVbJ7UDSBx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e97617802dd6b284e55f1bde9022d69718c4ccb13f7ba77c31463cd6965c623f.exe
    "C:\Users\Admin\AppData\Local\Temp\e97617802dd6b284e55f1bde9022d69718c4ccb13f7ba77c31463cd6965c623f.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4156-133-0x00007FFB695A0000-0x00007FFB6A061000-memory.dmp

    Filesize

    10.8MB

  • memory/4156-134-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-135-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-136-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-137-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-138-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-139-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-149-0x00007FFB695A0000-0x00007FFB6A061000-memory.dmp

    Filesize

    10.8MB

  • memory/4156-150-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-151-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-152-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-153-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-155-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB

  • memory/4156-154-0x000001592F750000-0x000001592F760000-memory.dmp

    Filesize

    64KB