Analysis

  • max time kernel
    0s
  • max time network
    67s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 07:31

General

  • Target

    49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe

  • Size

    1.4MB

  • MD5

    e36614455f58a676dbae883550e6f5bd

  • SHA1

    25bba6efec294ac6aa44e3440ba2499804a9b422

  • SHA256

    49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5

  • SHA512

    21f35168bc37faad422e0c53ae44ecf20a10b8233cb34a4acd0de72be2838a3371a5abe07308e8ffb99bc8c70437eec3e597aee623fca081b79dbab372cfdd48

  • SSDEEP

    24576:V05uhGZyuA2J20bTlO/WTyWo3LaDuyawx44DSVXT5Xepp:maGU0JRbpOUcLay1E49XT5Xepp

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe
    "C:\Users\Admin\AppData\Local\Temp\49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3168-0-0x000002D73D590000-0x000002D73D5C4000-memory.dmp

    Filesize

    208KB

  • memory/3168-3-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB

  • memory/3168-2-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB

  • memory/3168-1-0x00007FFE098B0000-0x00007FFE0A371000-memory.dmp

    Filesize

    10.8MB

  • memory/3168-4-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB

  • memory/3168-5-0x000002D757CF0000-0x000002D757CF8000-memory.dmp

    Filesize

    32KB

  • memory/3168-7-0x000002D757D10000-0x000002D757D1E000-memory.dmp

    Filesize

    56KB

  • memory/3168-6-0x000002D75B5F0000-0x000002D75B628000-memory.dmp

    Filesize

    224KB

  • memory/3168-22-0x00007FFE098B0000-0x00007FFE0A371000-memory.dmp

    Filesize

    10.8MB

  • memory/3168-23-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB

  • memory/3168-24-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB

  • memory/3168-25-0x000002D756000000-0x000002D756010000-memory.dmp

    Filesize

    64KB