Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-09-2023 02:16

General

  • Target

    5d3a6940632d55e12cf62287d1d408d1879396b4e3e55919114f2c257b053f57.exe

  • Size

    1.7MB

  • MD5

    83eb404cedd72f018bd5d4bd9bbbffb0

  • SHA1

    ff7523b237c9694b39310c5ef83219f6e9f8d805

  • SHA256

    5d3a6940632d55e12cf62287d1d408d1879396b4e3e55919114f2c257b053f57

  • SHA512

    558097594b7fadf41f3f28338a3cb31bf1986773e08085caa29c214b157f0d11c1fee383c5759b444805ec7eb1c64aeccb66963d55a3b85a73cd25200b03c219

  • SSDEEP

    24576:wAvyHdolzKqJowB5l4SpeTXoM/Bi+3seQxKchX7nDSVXT5XVFJdya:wmGy0uowvCSp+Xoki+98IXT5XVFJd1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d3a6940632d55e12cf62287d1d408d1879396b4e3e55919114f2c257b053f57.exe
    "C:\Users\Admin\AppData\Local\Temp\5d3a6940632d55e12cf62287d1d408d1879396b4e3e55919114f2c257b053f57.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3920-0-0x00000240BBC60000-0x00000240BBC94000-memory.dmp

    Filesize

    208KB

  • memory/3920-1-0x00007FFFC20B0000-0x00007FFFC2B71000-memory.dmp

    Filesize

    10.8MB

  • memory/3920-2-0x00000240BBD10000-0x00000240BBD20000-memory.dmp

    Filesize

    64KB

  • memory/3920-3-0x00000240BBD10000-0x00000240BBD20000-memory.dmp

    Filesize

    64KB

  • memory/3920-4-0x00000240D8B30000-0x00000240D8B38000-memory.dmp

    Filesize

    32KB

  • memory/3920-5-0x00000240D5230000-0x00000240D5268000-memory.dmp

    Filesize

    224KB

  • memory/3920-6-0x00000240D5200000-0x00000240D520E000-memory.dmp

    Filesize

    56KB

  • memory/3920-19-0x00007FFFC20B0000-0x00007FFFC2B71000-memory.dmp

    Filesize

    10.8MB

  • memory/3920-20-0x00000240BBD10000-0x00000240BBD20000-memory.dmp

    Filesize

    64KB

  • memory/3920-21-0x00000240BBD10000-0x00000240BBD20000-memory.dmp

    Filesize

    64KB