Overview

overview

10

Static

static

10

dc90cfc392...f1.exe

windows7-x64

1

dc90cfc392...f1.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-09-2023 18:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1.exe

  • Size

    1.3MB

  • MD5

    ba6b76df6cc83bc6fdb8c7cee71b694e

  • SHA1

    4f6f4a287f7eee0d33b97c743be60d04fcc3dcee

  • SHA256

    dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1

  • SHA512

    fa1f810426fe1630d8c4634d0bbbe231cb81c320624417b6c8ac726d6f24f393a8f0df4f94ae381e036f52f90a86785d71863c87e3de125bc3041be96c113b8b

  • SSDEEP

    24576:GUCKtHuvIxVv4xfO7eDVtk7hLm+JOzhImrqMyyaPDSVXT5X:rrtHuvIxVvafaeDVKLmm+ymI1sXT5X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1.exe
    "C:\Users\Admin\AppData\Local\Temp\dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1040-0-0x000001EE685F0000-0x000001EE68624000-memory.dmp

    Filesize

    208KB

    Download

  • memory/1040-1-0x00007FFE64F40000-0x00007FFE65A01000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1040-2-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1040-3-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1040-4-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1040-5-0x000001EE68DC0000-0x000001EE68DC8000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1040-6-0x000001EE6E9B0000-0x000001EE6E9E8000-memory.dmp

    Filesize

    224KB

    Download

  • memory/1040-7-0x000001EE6E980000-0x000001EE6E98E000-memory.dmp

    Filesize

    56KB

    Download

  • memory/1040-20-0x00007FFE64F40000-0x00007FFE65A01000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/1040-21-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1040-22-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1040-23-0x000001EE68D70000-0x000001EE68D80000-memory.dmp

    Filesize

    64KB

    Download