Analysis

  • max time kernel
    132s
  • max time network
    148s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24-12-2023 02:05

General

  • Target

    70566aebcd8c141e593d00e189a43ee1d9b08e745aaf3043153c2087ba8c2671.exe

  • Size

    56KB

  • MD5

    b0d3f508b4ff81f796f0a9ee1520911f

  • SHA1

    45563437253a445b36c97d152eecae3d9de59b09

  • SHA256

    70566aebcd8c141e593d00e189a43ee1d9b08e745aaf3043153c2087ba8c2671

  • SHA512

    a52d64db272d21f0b485ef082431fea2754acb24eebde4079b17d53b3a64cc6afb671d35d218e5ece4ce24bdd901bcec3d81b16f01547d32932a9e1f0f688c33

  • SSDEEP

    768:kdiv4Kbwg2V+YV5QfADYI1WQZConqLMh0AoE7pwaambG4lRFVPJ1M2RhXIxT:k+b5sCKqLzECafbX3zxTRpIxT

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\70566aebcd8c141e593d00e189a43ee1d9b08e745aaf3043153c2087ba8c2671.exe
    "C:\Users\Admin\AppData\Local\Temp\70566aebcd8c141e593d00e189a43ee1d9b08e745aaf3043153c2087ba8c2671.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/424-0-0x0000000000750000-0x0000000000764000-memory.dmp

    Filesize

    80KB

  • memory/424-1-0x00007FFCDB7E0000-0x00007FFCDC2A2000-memory.dmp

    Filesize

    10.8MB

  • memory/424-2-0x000000001B4D0000-0x000000001B4E0000-memory.dmp

    Filesize

    64KB

  • memory/424-3-0x00007FFCFC920000-0x00007FFCFCB29000-memory.dmp

    Filesize

    2.0MB

  • memory/424-4-0x00007FFCDB7E0000-0x00007FFCDC2A2000-memory.dmp

    Filesize

    10.8MB

  • memory/424-5-0x000000001B4D0000-0x000000001B4E0000-memory.dmp

    Filesize

    64KB

  • memory/424-6-0x00007FFCFC920000-0x00007FFCFCB29000-memory.dmp

    Filesize

    2.0MB