0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98

Analysis

max time kernel
150s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 07:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98.exe
Size

1.0MB
MD5

e48cbd2ab48276f50bd4931370bddd96
SHA1

33fd785193efd4afc9d1f082c91dfb83a312dee5
SHA256

0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98
SHA512

b02af4b56c605e3cddcbb6c1ebcc21e53473e5e2c5b8d283c6853e4e68eae1961848c0a0d5c2d7891d39beab1034cc0fc6c8ed628251e12e4dfe885539732634
SSDEEP

12288:3JKZNrmgdN6FpVOhR2xYCED+MDUYRWDJXrUjEMurfHMlQennPTH1:ZgRfEpIREYNKMDSJXrxMuDsl3nnLH

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	2244	svchost.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
224	0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98.exe

C:\Users\Admin\AppData\Local\Temp\0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98.exe
"C:\Users\Admin\AppData\Local\Temp\0f71d76926fab95dbbb626d55592f0108f2af5c69f256d96d06d0b7f899bad98.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:224

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:2284

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm

Filesize
16KB

MD5
56621eb87540f9a9ef0a5ab255563ea3

SHA1
63d8b66610e6164aeaa22890eedc367390fed64d

SHA256
175d3f41151fb8e00b825a63bb4dd00875405511e6ae3c2e5848bd5684859f6d

SHA512
6bc8e0f7eb4d1ecfd0505ff79f86cd742202dedba29e4d69e8d7a2429bfb39e7d8a2d25993064ffd3006afe389b90c5a2d82de45ebd4c3eea064bb5afda1e6e6

Download Submit
memory/2244-41-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-42-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-38-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-39-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-40-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-5-0x0000019FE1850000-0x0000019FE1860000-memory.dmp

Filesize
64KB

Download
memory/2244-47-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-43-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-44-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-45-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-37-0x0000019FE9F40000-0x0000019FE9F41000-memory.dmp

Filesize
4KB

Download
memory/2244-46-0x0000019FE9F70000-0x0000019FE9F71000-memory.dmp

Filesize
4KB

Download
memory/2244-57-0x0000019FE9AC0000-0x0000019FE9AC1000-memory.dmp

Filesize
4KB

Download
memory/2244-49-0x0000019FE9B80000-0x0000019FE9B81000-memory.dmp

Filesize
4KB

Download
memory/2244-51-0x0000019FE9B90000-0x0000019FE9B91000-memory.dmp

Filesize
4KB

Download
memory/2244-54-0x0000019FE9B80000-0x0000019FE9B81000-memory.dmp

Filesize
4KB

Download
memory/2244-48-0x0000019FE9B90000-0x0000019FE9B91000-memory.dmp

Filesize
4KB

Download
memory/2244-21-0x0000019FE1950000-0x0000019FE1960000-memory.dmp

Filesize
64KB

Download
memory/2244-69-0x0000019FE9CC0000-0x0000019FE9CC1000-memory.dmp

Filesize
4KB

Download
memory/2244-71-0x0000019FE9CD0000-0x0000019FE9CD1000-memory.dmp

Filesize
4KB

Download
memory/2244-72-0x0000019FE9CD0000-0x0000019FE9CD1000-memory.dmp

Filesize
4KB

Download
memory/2244-73-0x0000019FE9DE0000-0x0000019FE9DE1000-memory.dmp

Filesize
4KB

Download
memory/2244-74-0x0000019FE9D00000-0x0000019FE9D01000-memory.dmp

Filesize
4KB

Download
memory/2244-75-0x0000019FE9CF0000-0x0000019FE9CF1000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads