Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 08:35

General

  • Target

    a4e9704c1fc8e8269934e88cf068d2cfa7a4e9833292a0cea4c4535e4fb288cb.exe

  • Size

    1.7MB

  • MD5

    3643ee529da8ad5d3b58abe79329c3da

  • SHA1

    efc93aa13b55efb166fccfa3c76de584b8cd8834

  • SHA256

    a4e9704c1fc8e8269934e88cf068d2cfa7a4e9833292a0cea4c4535e4fb288cb

  • SHA512

    1fdddc0aa13f41f8cd2b23786e67fa3dd4f93505dd3e61a8f59dc76d142f902b699f6030dbdf1164729e48e140bcca38d8090d917dc0824883c378975d06a6ae

  • SSDEEP

    24576:1QnaP+tCiiEUjkGIIWCSwGPyRIoEQpLSvsd3TDSVXT5XtqPya:1z+tCkUjzIIWCMqRIocUdAXT5XgP1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4e9704c1fc8e8269934e88cf068d2cfa7a4e9833292a0cea4c4535e4fb288cb.exe
    "C:\Users\Admin\AppData\Local\Temp\a4e9704c1fc8e8269934e88cf068d2cfa7a4e9833292a0cea4c4535e4fb288cb.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4528-0-0x0000017D34440000-0x0000017D34474000-memory.dmp

    Filesize

    208KB

  • memory/4528-3-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-2-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-1-0x00007FFB6DD40000-0x00007FFB6E801000-memory.dmp

    Filesize

    10.8MB

  • memory/4528-4-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-5-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-6-0x0000017D51E50000-0x0000017D51E58000-memory.dmp

    Filesize

    32KB

  • memory/4528-8-0x0000017D52490000-0x0000017D5249E000-memory.dmp

    Filesize

    56KB

  • memory/4528-7-0x0000017D524D0000-0x0000017D52508000-memory.dmp

    Filesize

    224KB

  • memory/4528-21-0x00007FFB6DD40000-0x00007FFB6E801000-memory.dmp

    Filesize

    10.8MB

  • memory/4528-23-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-22-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB

  • memory/4528-24-0x0000017D4CBC0000-0x0000017D4CBD0000-memory.dmp

    Filesize

    64KB