Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-09-2023 03:16

General

  • Target

    16eda190341d6d983bf1f42284e472c9fbf5b47b14ae123adfcd3766d019fc5e.exe

  • Size

    1.7MB

  • MD5

    a17bace3e74634e4f5757e150fb8b8ef

  • SHA1

    efd8a88d7b9e836ca8a5ce32106032007c5efc46

  • SHA256

    16eda190341d6d983bf1f42284e472c9fbf5b47b14ae123adfcd3766d019fc5e

  • SHA512

    212882530f910a0db1848cd55526d34cf80820b2b9bc38ad77d79fad952fb5549f53b22b76d97864264a0aab04ade0497fbaa9b9b24445a6f2111a9dc1439516

  • SSDEEP

    24576:gR41mlRpNJ6l0UKRC3QT0G1L2v1VdXN7fIDSVXT5XaWoOya:gG1oRMl0XRC3QT0Gxw1XT5XVN1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16eda190341d6d983bf1f42284e472c9fbf5b47b14ae123adfcd3766d019fc5e.exe
    "C:\Users\Admin\AppData\Local\Temp\16eda190341d6d983bf1f42284e472c9fbf5b47b14ae123adfcd3766d019fc5e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2212-0-0x0000025A4D9D0000-0x0000025A4DA04000-memory.dmp

    Filesize

    208KB

  • memory/2212-1-0x00007FFCA4DE0000-0x00007FFCA58A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2212-2-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-3-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-4-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-5-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-6-0x0000025A6B710000-0x0000025A6B718000-memory.dmp

    Filesize

    32KB

  • memory/2212-7-0x0000025A6BD90000-0x0000025A6BDC8000-memory.dmp

    Filesize

    224KB

  • memory/2212-8-0x0000025A6BD50000-0x0000025A6BD5E000-memory.dmp

    Filesize

    56KB

  • memory/2212-21-0x00007FFCA4DE0000-0x00007FFCA58A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2212-22-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-23-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB

  • memory/2212-24-0x0000025A66540000-0x0000025A66550000-memory.dmp

    Filesize

    64KB