Analysis

  • max time kernel
    151s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-08-2023 09:27

General

  • Target

    b715c242c0117a0848c367b3a66360a17756a182395638031532ea26d4ab30f0.exe

  • Size

    1.6MB

  • MD5

    1560258bc100a2f5769feca5751d2e4b

  • SHA1

    d741c2417ad8022c7d2350a5c44022a0a0a8f70b

  • SHA256

    b715c242c0117a0848c367b3a66360a17756a182395638031532ea26d4ab30f0

  • SHA512

    ff87d4b186d4e69fcf4ff7aa9809a991c8a573bd25e93dea52d5930f2c1803e0fd1cb2d3c81e4a177201e17e404d2a9994d7632e6de360450f872f31ef2ca6cc

  • SSDEEP

    24576:57kyOyrMRHYz1RnNLCuer6i/uSxFJ2x47t+jcl6GDSVXT5XU0UlVVKya:5Wy6YJRNLrer2SxFXYjcyXT5XaVs1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b715c242c0117a0848c367b3a66360a17756a182395638031532ea26d4ab30f0.exe
    "C:\Users\Admin\AppData\Local\Temp\b715c242c0117a0848c367b3a66360a17756a182395638031532ea26d4ab30f0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/740-0-0x00007FFAF77A0000-0x00007FFAF8261000-memory.dmp

    Filesize

    10.8MB

  • memory/740-1-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB

  • memory/740-2-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB

  • memory/740-3-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB

  • memory/740-4-0x000002227C500000-0x000002227C508000-memory.dmp

    Filesize

    32KB

  • memory/740-5-0x000002227FD70000-0x000002227FDA8000-memory.dmp

    Filesize

    224KB

  • memory/740-6-0x000002227C510000-0x000002227C51E000-memory.dmp

    Filesize

    56KB

  • memory/740-19-0x00007FFAF77A0000-0x00007FFAF8261000-memory.dmp

    Filesize

    10.8MB

  • memory/740-20-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB

  • memory/740-21-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB

  • memory/740-22-0x000002227C540000-0x000002227C550000-memory.dmp

    Filesize

    64KB