Analysis

  • max time kernel
    140s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 00:07

General

  • Target

    1bbb546c90613a9eb46562a5db2836d8.exe

  • Size

    289KB

  • MD5

    1bbb546c90613a9eb46562a5db2836d8

  • SHA1

    1cefd3a420e5bdab96ea5e9de426f7f26bfa2ab0

  • SHA256

    106db6b06744f6b8cf8ef64f1a6ee63e7577dd6cae9a325e007aff88e32046b7

  • SHA512

    aa7d74acccb0ab61f58844f4d6873ef06358652a9f71b6a24fd9ef695af50e6077df4b6b92ecdf19f5b72e420a5fe4ac06cceb2e416e2e61e19fb813484a44a9

  • SSDEEP

    6144:3Ui0aRHUY1vjapGWCNp/G2H+tv0TBZvPKuJV:ki0aRHUAjapGWCNp/G2H+tv0TPauJV

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1bbb546c90613a9eb46562a5db2836d8.exe
    "C:\Users\Admin\AppData\Local\Temp\1bbb546c90613a9eb46562a5db2836d8.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads