Analysis

  • max time kernel
    150s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 17:07

General

  • Target

    c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe

  • Size

    9.0MB

  • MD5

    b048acaa066a94f0e9143b4f7155bd0c

  • SHA1

    11d6df5eb431cf5eb8dd642f85d6f17be6a22cfb

  • SHA256

    c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73

  • SHA512

    cda2679bcf236fb93e652c0362f311130855cc2df62fa4754eaa58b6bbb565e3b12d0a7c5d9f0ba78325b6a011e31448c9cf43349194d0f8013c5a2dd749fc58

  • SSDEEP

    196608:Q6xRZlMvBdsdaBybPDhnsri7Jg22EwQ7bnAEByQobm9sQPsf78c:QyRZSdGDdxtg227ktBroK9JPsfoc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe
    "C:\Users\Admin\AppData\Local\Temp\c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2600

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2600-0-0x0000000000400000-0x0000000001755000-memory.dmp

          Filesize

          19.3MB

        • memory/2600-1-0x0000000001D00000-0x0000000001D01000-memory.dmp

          Filesize

          4KB

        • memory/2600-2-0x0000000000400000-0x0000000001755000-memory.dmp

          Filesize

          19.3MB

        • memory/2600-5-0x0000000000400000-0x0000000001755000-memory.dmp

          Filesize

          19.3MB

        • memory/2600-6-0x0000000000400000-0x0000000001755000-memory.dmp

          Filesize

          19.3MB