Overview

overview

3

Static

static

3

Isolation.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    79s
  • max time network
    89s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2023, 19:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Isolation.exe

  • Size

    514KB

  • MD5

    64accb8fd46d1485f12bec2f7084df44

  • SHA1

    0fdfa2daa61864981c8b99118442edacc636f065

  • SHA256

    40fb45d64832b3e60b9b683e1683cbe3d874f058ab51bb37b68fe0ab0d36b73c

  • SHA512

    e0e1d70c1edbfd3d0437d831abf65eb2a2bf7c06e68258b7661b790f8eb0f63da4db366e3e08e651971e55acfe7c1cd9619985ec0e422e74ad9c9660c421e5ba

  • SSDEEP

    12288:AOyI8Jv0Ijmg+KsBoVPS/0HRzxT14RkLeubYn+Me:AOH8JZ8/0Rf/nYnB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Isolation.exe
    "C:\Users\Admin\AppData\Local\Temp\Isolation.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    PID:3176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads