Analysis

  • max time kernel
    112s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 02:07

General

  • Target

    4b8481b52adcc4b3a76c06837810a0b3.exe

  • Size

    9KB

  • MD5

    4b8481b52adcc4b3a76c06837810a0b3

  • SHA1

    2175cf80f2c4cb1309f61410a7de74d5c64657c1

  • SHA256

    7599ac09241b8501eab6532f5f8afc33107c438ac6cdecada37d9806f7db3164

  • SHA512

    85ff5a824aa17e2ad454cce9809b35ab0845c2d5541208ce2401cafffcc27703c8bbf8f4ac1673a08dfdb88c87d2082c498773cb725fc828ffc6628c44ae308f

  • SSDEEP

    192:YBksuHm6N7oy1bzleMZZ3V93Vnjdwqzi3xS4:q4xZBeM/FnhwqWk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b8481b52adcc4b3a76c06837810a0b3.exe
    "C:\Users\Admin\AppData\Local\Temp\4b8481b52adcc4b3a76c06837810a0b3.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4436-0-0x0000000000E70000-0x0000000000E78000-memory.dmp

    Filesize

    32KB

  • memory/4436-3-0x00007FFB4AC00000-0x00007FFB4B6C1000-memory.dmp

    Filesize

    10.8MB

  • memory/4436-2-0x0000000003070000-0x00000000030AC000-memory.dmp

    Filesize

    240KB

  • memory/4436-4-0x000000001BD30000-0x000000001BD40000-memory.dmp

    Filesize

    64KB

  • memory/4436-1-0x0000000001740000-0x0000000001752000-memory.dmp

    Filesize

    72KB

  • memory/4436-5-0x00007FFB4AC00000-0x00007FFB4B6C1000-memory.dmp

    Filesize

    10.8MB

  • memory/4436-6-0x00007FFB4AC00000-0x00007FFB4B6C1000-memory.dmp

    Filesize

    10.8MB