Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/09/2023, 08:53

General

  • Target

    -a1-ob-bab.exe

  • Size

    1.3MB

  • MD5

    6c3b64ed54992144d79ab5e206863c8f

  • SHA1

    9a3a25055a132ad3100a1bd5830fb512185fecc3

  • SHA256

    db44c7e225058655834c5fe3db31fe3b00ea46069531b779b9a5d9219c7d5b17

  • SHA512

    1fe6d445a2ff068550eacbd3ccae8eb08101f70c678855e2bcaad9f88e0899286ea2230b200f744cd2c8f333336cc6acab259d6fe832e4f6247a013d966a310e

  • SSDEEP

    24576:8G09ReY+gUQDMhnV3jLDn+dkg3LZUTJNHq5qqCJCCezDbL+vZqnvui:j09Y9gURbbtKWTLHqEXCm4vu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\-a1-ob-bab.exe
    "C:\Users\Admin\AppData\Local\Temp\-a1-ob-bab.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4184-0-0x0000000000310000-0x0000000000462000-memory.dmp

    Filesize

    1.3MB

  • memory/4184-3-0x00007FFB68320000-0x00007FFB68DE1000-memory.dmp

    Filesize

    10.8MB

  • memory/4184-4-0x0000000000CC0000-0x0000000000CC8000-memory.dmp

    Filesize

    32KB

  • memory/4184-5-0x000000001B0F0000-0x000000001B100000-memory.dmp

    Filesize

    64KB

  • memory/4184-2-0x0000000000CB0000-0x0000000000CB8000-memory.dmp

    Filesize

    32KB

  • memory/4184-1-0x0000000002680000-0x00000000026C0000-memory.dmp

    Filesize

    256KB

  • memory/4184-6-0x0000000000C30000-0x0000000000C3C000-memory.dmp

    Filesize

    48KB

  • memory/4184-7-0x00000000026C0000-0x00000000026CC000-memory.dmp

    Filesize

    48KB

  • memory/4184-8-0x00000000026E0000-0x00000000026E8000-memory.dmp

    Filesize

    32KB

  • memory/4184-9-0x000000001AFD0000-0x000000001AFF6000-memory.dmp

    Filesize

    152KB

  • memory/4184-10-0x000000001B090000-0x000000001B098000-memory.dmp

    Filesize

    32KB

  • memory/4184-11-0x000000001B0A0000-0x000000001B0B2000-memory.dmp

    Filesize

    72KB

  • memory/4184-12-0x000000001BA80000-0x000000001BABC000-memory.dmp

    Filesize

    240KB

  • memory/4184-13-0x00007FFB68320000-0x00007FFB68DE1000-memory.dmp

    Filesize

    10.8MB