Analysis

  • max time kernel
    139s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 01:27

General

  • Target

    2070dfe8450807e52558f315c0b32aa0.exe

  • Size

    495KB

  • MD5

    2070dfe8450807e52558f315c0b32aa0

  • SHA1

    8d633dde10c706ff60a6d2b2383c0e5586b7b8ca

  • SHA256

    7df03f5569d9a80eae365d620b5001c2ce864a771cfa4c3965962571d5411330

  • SHA512

    0d8b476fa5525b1b113ca4041e82e95a329c038719d59b92184a0eb525f44b97e9ba31416734af3073c5f46aeaca9a40e61b4315d923dfcaca0954b67655e2bc

  • SSDEEP

    12288:PFk2qTTPW4MSv/WK089BxVsCCFHerBAMx1SofGIItmuaCphVmmARY:r0jW4dw8TjsCiHoBr4IuCCdFz

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2070dfe8450807e52558f315c0b32aa0.exe
    "C:\Users\Admin\AppData\Local\Temp\2070dfe8450807e52558f315c0b32aa0.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1788-0-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-2-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-5-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-4-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-7-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-9-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-11-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-13-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-15-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-17-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-21-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-28-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-37-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-41-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-48-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-56-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-53-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-67-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-79-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-84-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-99-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-86-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-124-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-130-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-141-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-157-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-172-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-174-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-176-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-191-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-194-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-192-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-216-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-225-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-211-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-260-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-283-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-285-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-310-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-309-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-308-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-307-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-300-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-269-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-210-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-209-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-208-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-179-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-145-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-143-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-128-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-126-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-83-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-81-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-77-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-75-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-73-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-71-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-69-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-65-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-63-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-61-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-59-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-58-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-50-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-47-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-45-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-43-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-40-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-38-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-34-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-32-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-30-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-26-0x0000000077BC2000-0x0000000077BC3000-memory.dmp

    Filesize

    4KB

  • memory/1788-24-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB

  • memory/1788-20-0x0000000000590000-0x00000000005E2000-memory.dmp

    Filesize

    328KB