Analysis

  • max time kernel
    1s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 09:42

General

  • Target

    9a1398c315bc339f6ac805d876ca41f32821c090fe52af0b21a085f7fbc59512.exe

  • Size

    1.6MB

  • MD5

    95a4175919ccb7d52d6b6230d408dc15

  • SHA1

    1d1c03dd2c3fcadbbc8c1edb8b5852045632eaa8

  • SHA256

    9a1398c315bc339f6ac805d876ca41f32821c090fe52af0b21a085f7fbc59512

  • SHA512

    7c2d3a4a438bff34ac4cb735478541f742ddcbdf447e12ebcf2969c3eea5df1e67daa2d0a6cbd5b7a0c8f8dc0f02e96ff5ec1efb257b092657921a9fd949e23f

  • SSDEEP

    49152:a72LIF0ZXXJx75R4hr+dz5ErX9kcJIEXT5XVlE1:WxqHf7P6rqz5u9kS9D5Y1

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9a1398c315bc339f6ac805d876ca41f32821c090fe52af0b21a085f7fbc59512.exe
    "C:\Users\Admin\AppData\Local\Temp\9a1398c315bc339f6ac805d876ca41f32821c090fe52af0b21a085f7fbc59512.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1892-0-0x00000223166E0000-0x0000022316714000-memory.dmp

    Filesize

    208KB

  • memory/1892-4-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB

  • memory/1892-3-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB

  • memory/1892-2-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB

  • memory/1892-5-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB

  • memory/1892-1-0x00007FF8B74D0000-0x00007FF8B7F91000-memory.dmp

    Filesize

    10.8MB

  • memory/1892-6-0x0000022333BC0000-0x0000022333BC8000-memory.dmp

    Filesize

    32KB

  • memory/1892-8-0x000002232FCD0000-0x000002232FCDE000-memory.dmp

    Filesize

    56KB

  • memory/1892-7-0x000002232FD00000-0x000002232FD38000-memory.dmp

    Filesize

    224KB

  • memory/1892-21-0x00007FF8B74D0000-0x00007FF8B7F91000-memory.dmp

    Filesize

    10.8MB

  • memory/1892-22-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB

  • memory/1892-23-0x00000223166C0000-0x00000223166D0000-memory.dmp

    Filesize

    64KB