Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-12-2023 16:25

General

  • Target

    9484656654ed2fdb5b32c7ff4200b2c6fe0584ec49611c48bd1580c49a9bb088.exe

  • Size

    1.7MB

  • MD5

    528434d9590151b5a33df52c13c49f30

  • SHA1

    70167ac70bbbe9ee11d6b333bb89ffdcdf1ddb9a

  • SHA256

    9484656654ed2fdb5b32c7ff4200b2c6fe0584ec49611c48bd1580c49a9bb088

  • SHA512

    8666831e76418143378615f443cb986876c9c092ee5cd4470fb269eff23cd2aedc25bbe97fe15aea74148b2866d91eb3c17d4574f968c0a5cf23d613f9a831f4

  • SSDEEP

    24576:oSuJjPefpdAZuizPWI11u8ab9ILFh2J9kc5yOArDSVXT5Xo2cya:oSiPeorzPWJ88yuu8XT5X41

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9484656654ed2fdb5b32c7ff4200b2c6fe0584ec49611c48bd1580c49a9bb088.exe
    "C:\Users\Admin\AppData\Local\Temp\9484656654ed2fdb5b32c7ff4200b2c6fe0584ec49611c48bd1580c49a9bb088.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5064-0-0x0000019DDED90000-0x0000019DDEDC4000-memory.dmp

    Filesize

    208KB

  • memory/5064-3-0x0000019DDF430000-0x0000019DDF440000-memory.dmp

    Filesize

    64KB

  • memory/5064-2-0x0000019DDF430000-0x0000019DDF440000-memory.dmp

    Filesize

    64KB

  • memory/5064-1-0x00007FFF739B0000-0x00007FFF74471000-memory.dmp

    Filesize

    10.8MB

  • memory/5064-4-0x0000019DDF430000-0x0000019DDF440000-memory.dmp

    Filesize

    64KB

  • memory/5064-5-0x0000019DFCAF0000-0x0000019DFCAF8000-memory.dmp

    Filesize

    32KB

  • memory/5064-7-0x0000019DF9160000-0x0000019DF916E000-memory.dmp

    Filesize

    56KB

  • memory/5064-6-0x0000019DF9190000-0x0000019DF91C8000-memory.dmp

    Filesize

    224KB

  • memory/5064-12-0x00007FFF739B0000-0x00007FFF74471000-memory.dmp

    Filesize

    10.8MB

  • memory/5064-13-0x0000019DDF430000-0x0000019DDF440000-memory.dmp

    Filesize

    64KB

  • memory/5064-14-0x0000019DDF430000-0x0000019DDF440000-memory.dmp

    Filesize

    64KB