Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 13:31

General

  • Target

    a4b4c8789e89030d65faaf65bdc101e0.exe

  • Size

    8.2MB

  • MD5

    a4b4c8789e89030d65faaf65bdc101e0

  • SHA1

    f5b868b2397da3c2e6901624ad69c5e3a14e7b13

  • SHA256

    aed9bcb1ce9fb25750204cca9c49dba0cc1cb67ff672d09a8d69e730124e17b6

  • SHA512

    141356d0cb1e0b5bffcb0ee609f1c077eecf5d3604cb23a369c489910b98611172ca27b7cead7869752883ff18e181e302279e53d1b2956b7fb81f5c34ebf9de

  • SSDEEP

    196608:QyCa9EOOUNsYdV86YIzWIsH6zuMWeaUkCAaCu:DgUf86YDHSlDkM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4b4c8789e89030d65faaf65bdc101e0.exe
    "C:\Users\Admin\AppData\Local\Temp\a4b4c8789e89030d65faaf65bdc101e0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4940-0-0x0000000075000000-0x00000000757B0000-memory.dmp

    Filesize

    7.7MB

  • memory/4940-1-0x0000000000F40000-0x0000000001770000-memory.dmp

    Filesize

    8.2MB

  • memory/4940-2-0x000000000B740000-0x000000000BFA0000-memory.dmp

    Filesize

    8.4MB

  • memory/4940-3-0x000000000C550000-0x000000000CAF4000-memory.dmp

    Filesize

    5.6MB

  • memory/4940-4-0x00000000062C0000-0x0000000006352000-memory.dmp

    Filesize

    584KB

  • memory/4940-5-0x00000000063B0000-0x00000000063C0000-memory.dmp

    Filesize

    64KB

  • memory/4940-6-0x0000000006120000-0x000000000612A000-memory.dmp

    Filesize

    40KB

  • memory/4940-7-0x00000000063B0000-0x00000000063C0000-memory.dmp

    Filesize

    64KB

  • memory/4940-8-0x0000000075000000-0x00000000757B0000-memory.dmp

    Filesize

    7.7MB

  • memory/4940-9-0x00000000063B0000-0x00000000063C0000-memory.dmp

    Filesize

    64KB

  • memory/4940-10-0x00000000063B0000-0x00000000063C0000-memory.dmp

    Filesize

    64KB