Analysis
- max time kernel
146s - max time network
131s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
- submitted
09/12/2023, 11:39
General
- Target file.exe
- Size 957KB
- Sample231209-nsaweshfe8
- SHA256 0935077c48020cded9538925a4ed667ec0cb228a9eb77dbd7bca98eec45dbe4c
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4704-1-0x0000000000870000-0x0000000000A16000-memory.dmp
memory/4704-3-0x0000000003620000-0x0000000003660000-memory.dmp
memory/4704-2-0x0000000003620000-0x0000000003660000-memory.dmp
memory/4704-7-0x00007FFB23870000-0x00007FFB2391A000-memory.dmp
memory/4704-8-0x00007FFB306A0000-0x00007FFB3073E000-memory.dmp
memory/4704-9-0x00007FFB2D0D0000-0x00007FFB2D0E2000-memory.dmp
memory/4704-10-0x00007FFB237B0000-0x00007FFB2386D000-memory.dmp
memory/4704-11-0x00007FFB2FEB0000-0x00007FFB30051000-memory.dmp
memory/4704-12-0x00007FFB134C0000-0x00007FFB13F81000-memory.dmp
memory/4704-13-0x00007FFB31430000-0x00007FFB3145B000-memory.dmp
memory/4704-15-0x00007FFB134C0000-0x00007FFB13F81000-memory.dmp
memory/4704-14-0x0000000000870000-0x0000000000A16000-memory.dmp
memory/4704-16-0x0000000000870000-0x0000000000A16000-memory.dmp
memory/4704-17-0x00007FFB1E270000-0x00007FFB1E3BE000-memory.dmp
memory/4704-19-0x00007FFB2F680000-0x00007FFB2F6A7000-memory.dmp
memory/4704-18-0x000000001C940000-0x000000001C950000-memory.dmp
memory/4704-22-0x00007FFB31B70000-0x00007FFB31D65000-memory.dmp
memory/4704-23-0x00007FFB2F2F0000-0x00007FFB2F5B9000-memory.dmp
memory/4704-24-0x00007FFB2F7B0000-0x00007FFB2F84D000-memory.dmp
memory/4704-27-0x00007FFB30740000-0x00007FFB307EC000-memory.dmp
memory/4704-26-0x00007FFB31430000-0x00007FFB3145B000-memory.dmp
memory/4704-29-0x00007FFB2FBC0000-0x00007FFB2FCEA000-memory.dmp
memory/4704-30-0x00007FFB23A30000-0x00007FFB23A95000-memory.dmp
memory/4704-28-0x00007FFB306A0000-0x00007FFB3073E000-memory.dmp
memory/4704-25-0x00007FFB2FEB0000-0x00007FFB30051000-memory.dmp
memory/4704-31-0x00007FFB316C0000-0x00007FFB31A15000-memory.dmp
memory/4704-32-0x00007FFB31460000-0x00007FFB3152D000-memory.dmp
memory/4704-33-0x00007FFB23870000-0x00007FFB2391A000-memory.dmp
memory/4704-34-0x00007FFB2FD10000-0x00007FFB2FD65000-memory.dmp
memory/4704-36-0x00007FFB21840000-0x00007FFB2184A000-memory.dmp
memory/4704-38-0x00007FFB27610000-0x00007FFB27626000-memory.dmp
memory/4704-37-0x00007FFB134C0000-0x00007FFB13F81000-memory.dmp
memory/4704-39-0x00007FFB237B0000-0x00007FFB2386D000-memory.dmp
memory/4704-40-0x00007FFB2FD80000-0x00007FFB2FEAA000-memory.dmp
memory/4704-41-0x00007FFB1E270000-0x00007FFB1E3BE000-memory.dmp
memory/4704-42-0x00007FFB2F680000-0x00007FFB2F6A7000-memory.dmp
memory/4704-43-0x0000000000870000-0x0000000000A16000-memory.dmp
memory/4704-44-0x0000000003620000-0x0000000003660000-memory.dmp