Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-10-2023 17:29

General

  • Target

    4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe

  • Size

    3.1MB

  • MD5

    45e4677379586dbe595232297d095271

  • SHA1

    99413bca1143df223faa6bad5e776f6975cb98a7

  • SHA256

    4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df

  • SHA512

    63067ce20b2587d2f1268d85b3a71497dcfc39e831a363bf585daa2726f3897cc72877ca6d7b68b64d4d7103a1270ff13bd444537055ea2ae96757b5d327e445

  • SSDEEP

    49152:Tfv/XRm3fUHv648igad1UUi9Gi2G+KXflCCygqH9T53/A1Nc3Wad:TH/b6YgafUT2GhtnIP/CO

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe
    "C:\Users\Admin\AppData\Local\Temp\4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3448-34-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-37-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-39-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-41-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-43-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-45-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-79-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-80-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-81-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-82-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-83-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-84-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-85-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-86-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-87-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-88-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-89-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-90-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-91-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB

  • memory/3448-92-0x0000000003750000-0x0000000003950000-memory.dmp

    Filesize

    2.0MB