Analysis

  • max time kernel
    135s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 21:29

General

  • Target

    1d04fe2cd09b6457d39896fb1016c168.exe

  • Size

    9KB

  • MD5

    1d04fe2cd09b6457d39896fb1016c168

  • SHA1

    8f0d39586f25cf53dbdfe01648ca85d2da827d12

  • SHA256

    d2a5d39bda7c4ebae66af17f3fb29a4ddab93302ccdc0a7eac31e2c4d100ce01

  • SHA512

    fa77bb3e34fa65a1748278d6c40d600e97d6359551843247bc46483c4a67b2a7ea2307ab9cf17757b69a2b9777778c62fbf7a48d415628acba956aea8ed4e973

  • SSDEEP

    192:fBksun9MuIHIeMZZ3i93Vnjdwqze3DiXp:0lqIeMOFnhwqKziX

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1d04fe2cd09b6457d39896fb1016c168.exe
    "C:\Users\Admin\AppData\Local\Temp\1d04fe2cd09b6457d39896fb1016c168.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2220-0-0x00000000005B0000-0x00000000005B8000-memory.dmp

    Filesize

    32KB

  • memory/2220-1-0x00007FF911F60000-0x00007FF912A21000-memory.dmp

    Filesize

    10.8MB

  • memory/2220-2-0x0000000000E80000-0x0000000000E92000-memory.dmp

    Filesize

    72KB

  • memory/2220-3-0x00000000027D0000-0x000000000280C000-memory.dmp

    Filesize

    240KB

  • memory/2220-4-0x000000001B4E0000-0x000000001B4F0000-memory.dmp

    Filesize

    64KB

  • memory/2220-5-0x00007FF911F60000-0x00007FF912A21000-memory.dmp

    Filesize

    10.8MB

  • memory/2220-6-0x000000001B4E0000-0x000000001B4F0000-memory.dmp

    Filesize

    64KB

  • memory/2220-7-0x00007FF911F60000-0x00007FF912A21000-memory.dmp

    Filesize

    10.8MB