Analysis

  • max time kernel
    122s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/08/2023, 19:27

General

  • Target

    85698f3fe27a04e2f257d3276a60b2714e044dc1ff4da359faf36edbebd4121e.exe

  • Size

    3.2MB

  • MD5

    7adc2f57da61484369fa574454989e61

  • SHA1

    7587b52a9183963f2fb60bdfd1bd6174cd992d29

  • SHA256

    85698f3fe27a04e2f257d3276a60b2714e044dc1ff4da359faf36edbebd4121e

  • SHA512

    d692da71de192d967d2c16047a4f7e2369ae1090566d4ab796e9c81cb07bf1d891afbe3006f983b10071aab873f30b7399a4cb2658d47c86e6c6cce636b89dbf

  • SSDEEP

    49152:9UPRmYQRTHD5wYd5B02qkOJ4GwrvB2GYP65K7FNsb0nKESyDHs+Pq5Q949494:VZ8SdzB2VN5OyDHsUq5Q949494

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85698f3fe27a04e2f257d3276a60b2714e044dc1ff4da359faf36edbebd4121e.exe
    "C:\Users\Admin\AppData\Local\Temp\85698f3fe27a04e2f257d3276a60b2714e044dc1ff4da359faf36edbebd4121e.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4612-0-0x0000000140000000-0x0000000140344000-memory.dmp

          Filesize

          3.3MB

        • memory/4612-1-0x0000000001FE0000-0x0000000002040000-memory.dmp

          Filesize

          384KB

        • memory/4612-8-0x0000000001FE0000-0x0000000002040000-memory.dmp

          Filesize

          384KB

        • memory/4612-7-0x0000000001FE0000-0x0000000002040000-memory.dmp

          Filesize

          384KB

        • memory/4612-12-0x0000000001FE0000-0x0000000002040000-memory.dmp

          Filesize

          384KB

        • memory/4612-14-0x0000000140000000-0x0000000140344000-memory.dmp

          Filesize

          3.3MB