34d1b680b8c0d363d8377322eba4f219e5e7c8035ff269403fadfdf3ad5e0fd9

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 17:30

Target

310acad7055a89b4e19063f6b5005da8.exe
Size

107KB
MD5

310acad7055a89b4e19063f6b5005da8
SHA1

3464aadd82d7a20849411fefb9a3563c6de56ed3
SHA256

34d1b680b8c0d363d8377322eba4f219e5e7c8035ff269403fadfdf3ad5e0fd9
SHA512

68030bbf3cf7eaba859a410920237e8fb8746bfbeaccbecd71d965a7ae3cb4de3a3af15eea2fe4d0bd5ad99d316df3f33b696497a42042c0dfa5867f4638161c
SSDEEP

3072:MfeTDCjc0Ea0uJEIWabNpJRSmx2YY7r8HdjG:MfeXCjc0Ea0hqT7Sm9Mr

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
4176	310acad7055a89b4e19063f6b5005da8.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4176	310acad7055a89b4e19063f6b5005da8.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4176 wrote to memory of 928	4176	310acad7055a89b4e19063f6b5005da8.exe	91
PID 4176 wrote to memory of 928	4176	310acad7055a89b4e19063f6b5005da8.exe	91

C:\Users\Admin\AppData\Local\Temp\310acad7055a89b4e19063f6b5005da8.exe
"C:\Users\Admin\AppData\Local\Temp\310acad7055a89b4e19063f6b5005da8.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4176
- C:\Users\Admin\AppData\Local\Temp\310acad7055a89b4e19063f6b5005da8.exe
  C:\Users\Admin\AppData\Local\Temp\310acad7055a89b4e19063f6b5005da8.exe
  2⤵
  PID:928

memory/4176-1-0x00007FF974B10000-0x00007FF9754B1000-memory.dmp

Filesize
9.6MB

Download
memory/4176-0-0x000000001B690000-0x000000001B736000-memory.dmp

Filesize
664KB

Download
memory/4176-2-0x0000000001030000-0x0000000001040000-memory.dmp

Filesize
64KB

Download
memory/4176-3-0x00007FF974B10000-0x00007FF9754B1000-memory.dmp

Filesize
9.6MB

Download
memory/4176-4-0x0000000001020000-0x0000000001034000-memory.dmp

Filesize
80KB

Download
memory/4176-6-0x00000000011D0000-0x00000000011E2000-memory.dmp

Filesize
72KB

Download
memory/4176-7-0x000000001C4C0000-0x000000001C98E000-memory.dmp

Filesize
4.8MB

Download
memory/4176-5-0x0000000001010000-0x0000000001020000-memory.dmp

Filesize
64KB

Download
memory/4176-8-0x000000001BBE0000-0x000000001BC7C000-memory.dmp

Filesize
624KB

Download
memory/4176-10-0x000000001C9E0000-0x000000001CA2C000-memory.dmp

Filesize
304KB

Download
memory/4176-9-0x000000001B540000-0x000000001B548000-memory.dmp

Filesize
32KB

Download
memory/4176-12-0x00007FF974B10000-0x00007FF9754B1000-memory.dmp

Filesize
9.6MB

Download