Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2023, 13:51

General

  • Target

    crypt.exe

  • Size

    277KB

  • MD5

    4fe88bc5440133565a8e28a78d3bbcbd

  • SHA1

    7911334594e9fbe1a906a14dea43c69eac4ebb33

  • SHA256

    e4c38ebe42a935cd3442ec8097bc13913b81179084b6dfc06e1a7ec9a7e4717c

  • SHA512

    3b897cf0203bd6b640bed99072e9e788058de74247de4cda83b15a03283187136759f4fbbd7f95b2329ace5553b96c706422809bf9de47a01a3f3f09b4e14717

  • SSDEEP

    6144:2V+4tt25MIRakGNhYPu2p3QS97xNZhF6qv:425MIkkGNwPWixNv

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\crypt.exe
    "C:\Users\Admin\AppData\Local\Temp\crypt.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4148-0-0x000001CC14AD0000-0x000001CC14AE6000-memory.dmp

          Filesize

          88KB

        • memory/4148-1-0x00007FFD59B20000-0x00007FFD5A4C1000-memory.dmp

          Filesize

          9.6MB

        • memory/4148-2-0x000001CC14B50000-0x000001CC14B5A000-memory.dmp

          Filesize

          40KB

        • memory/4148-3-0x00007FFD59B20000-0x00007FFD5A4C1000-memory.dmp

          Filesize

          9.6MB

        • memory/4148-4-0x00007FFD58160000-0x00007FFD58C21000-memory.dmp

          Filesize

          10.8MB

        • memory/4148-5-0x000001CC14D70000-0x000001CC14D80000-memory.dmp

          Filesize

          64KB

        • memory/4148-6-0x000001CC14D70000-0x000001CC14D80000-memory.dmp

          Filesize

          64KB

        • memory/4148-7-0x000001CC14D70000-0x000001CC14D80000-memory.dmp

          Filesize

          64KB

        • memory/4148-10-0x00007FFD58160000-0x00007FFD58C21000-memory.dmp

          Filesize

          10.8MB

        • memory/4148-11-0x00007FFD59B20000-0x00007FFD5A4C1000-memory.dmp

          Filesize

          9.6MB