Analysis

  • max time kernel
    151s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/11/2023, 16:43

General

  • Target

    idle_master_extended_v1.10.0/IdleMasterExtended.exe

  • Size

    1.6MB

  • MD5

    e7477be0d0dd79b5742601968dc2a3fe

  • SHA1

    b8da7374a19c4b57c731f64a96930162e4a522c5

  • SHA256

    01d02247498fc63c3bafa501afb70344ea62afd8698a1239fc5d2af4e54cba23

  • SHA512

    6b834e25613b9c45974baa6e1c4f022489c2a4cec7ccb17ab06c09e148d3f6827f7a7801f4d44891b637df2534d8ac3e913c6ff8a5e29633c469444a83f60140

  • SSDEEP

    12288:EEkFtu4BTe44JY0AMI7jU17mOx2H+xRupUliqYKs84+wPNSljyCCEe:Ba0OjCne+7upUl5Rs85yCCEe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\IdleMasterExtended.exe
    "C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\IdleMasterExtended.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of AdjustPrivilegeToken
    PID:3076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3076-0-0x0000000075200000-0x00000000759B0000-memory.dmp

    Filesize

    7.7MB

  • memory/3076-1-0x0000000000B90000-0x0000000000D32000-memory.dmp

    Filesize

    1.6MB

  • memory/3076-2-0x0000000005CD0000-0x0000000006274000-memory.dmp

    Filesize

    5.6MB

  • memory/3076-3-0x0000000005720000-0x00000000057B2000-memory.dmp

    Filesize

    584KB

  • memory/3076-4-0x00000000056D0000-0x00000000056E0000-memory.dmp

    Filesize

    64KB

  • memory/3076-5-0x0000000005700000-0x000000000570A000-memory.dmp

    Filesize

    40KB

  • memory/3076-8-0x00000000097A0000-0x00000000097EA000-memory.dmp

    Filesize

    296KB

  • memory/3076-9-0x00000000056D0000-0x00000000056E0000-memory.dmp

    Filesize

    64KB

  • memory/3076-10-0x0000000075200000-0x00000000759B0000-memory.dmp

    Filesize

    7.7MB

  • memory/3076-11-0x00000000056D0000-0x00000000056E0000-memory.dmp

    Filesize

    64KB

  • memory/3076-12-0x00000000056D0000-0x00000000056E0000-memory.dmp

    Filesize

    64KB

  • memory/3076-13-0x00000000056D0000-0x00000000056E0000-memory.dmp

    Filesize

    64KB