Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 20:28

General

  • Target

    filesss.exe

  • Size

    36KB

  • MD5

    aac6786ebb74d50c3dc5ebb0fe24705b

  • SHA1

    55d4a8606d03fbb70af535d9682aabcfae64884e

  • SHA256

    68f656515d9b48c60473828132d9b3561f144b307d215a8295574dbfd784931d

  • SHA512

    a0e0d0710ad3b4c701eb6fae46047b7e7d789c704e7960fbcc99115f0e78622fa3227afc71f1b642ff04f65c684ef08981b5456a6ca402677cb68bf25a7b710b

  • SSDEEP

    768:RlXbdUDdawDimEps/0F1cbSLjacjvQp3qkfMjL8B:RlXbqDdLFEps8F6KjpjvwnMEB

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\filesss.exe
    "C:\Users\Admin\AppData\Local\Temp\filesss.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2744-0-0x000001B3E98D0000-0x000001B3E98DE000-memory.dmp

    Filesize

    56KB

  • memory/2744-1-0x000001B3EB440000-0x000001B3EB446000-memory.dmp

    Filesize

    24KB

  • memory/2744-3-0x000001B3EBD40000-0x000001B3EBD50000-memory.dmp

    Filesize

    64KB

  • memory/2744-2-0x00007FFAA37A0000-0x00007FFAA4261000-memory.dmp

    Filesize

    10.8MB

  • memory/2744-4-0x00007FFAA37A0000-0x00007FFAA4261000-memory.dmp

    Filesize

    10.8MB