Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 07:56

General

  • Target

    12c21ceca4151b31245cef5de7ad61cb.exe

  • Size

    9KB

  • MD5

    12c21ceca4151b31245cef5de7ad61cb

  • SHA1

    1a0e8dd487aed5cd79402bb80c00178ce4eae83f

  • SHA256

    4691463eabab6415d52251a4f36f833d75b6956499a03b2d8752068a18f5534f

  • SHA512

    94bf5ab63fc7ceb2fc822ceedad469c469f3d6769bca399440ed997a6b02544c934621bc630047661f83ad2925f58aa60ea319cc569cb8ecae2a38e81827f9c2

  • SSDEEP

    192:/BksuPzHNQQieMZZ3W93VnjdwqzS3ImaV:kH3ieMSFnhwqu4t

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\12c21ceca4151b31245cef5de7ad61cb.exe
    "C:\Users\Admin\AppData\Local\Temp\12c21ceca4151b31245cef5de7ad61cb.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4284

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4284-0-0x0000000000060000-0x0000000000068000-memory.dmp

          Filesize

          32KB

        • memory/4284-1-0x0000000000950000-0x0000000000962000-memory.dmp

          Filesize

          72KB

        • memory/4284-2-0x00007FFD02490000-0x00007FFD02F51000-memory.dmp

          Filesize

          10.8MB

        • memory/4284-3-0x0000000002160000-0x000000000219C000-memory.dmp

          Filesize

          240KB

        • memory/4284-4-0x0000000000990000-0x00000000009A0000-memory.dmp

          Filesize

          64KB

        • memory/4284-5-0x00007FFD02490000-0x00007FFD02F51000-memory.dmp

          Filesize

          10.8MB

        • memory/4284-6-0x00007FFD02490000-0x00007FFD02F51000-memory.dmp

          Filesize

          10.8MB