Analysis

  • max time kernel
    21s
  • max time network
    81s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 09:32

General

  • Target

    149863be27d1d6c2006fcb370e6573f7.exe

  • Size

    9KB

  • MD5

    149863be27d1d6c2006fcb370e6573f7

  • SHA1

    4fa6faa485270ada6375e5f128b60362f56e041c

  • SHA256

    b120c54e89436431f3f9f68720a0bd08896025d8abd77b9f91181c4227eda538

  • SHA512

    7cc60e10e6bfd8ee382579a4765266bbfce99d0902e590501577c399d1a1998ac5f867361e1f58487932e2cd7d54eeee498f075476d3e5729acdaab75c193ebf

  • SSDEEP

    192:HBksurzHNQRUeMZZ3493Vnjdwqzv3zI2m:QH2UeM8Fnhwqrc2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\149863be27d1d6c2006fcb370e6573f7.exe
    "C:\Users\Admin\AppData\Local\Temp\149863be27d1d6c2006fcb370e6573f7.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/316-0-0x0000000000D40000-0x0000000000D48000-memory.dmp

    Filesize

    32KB

  • memory/316-1-0x000000001B7B0000-0x000000001B7C2000-memory.dmp

    Filesize

    72KB

  • memory/316-2-0x000000001B810000-0x000000001B84C000-memory.dmp

    Filesize

    240KB

  • memory/316-3-0x00007FF851B30000-0x00007FF8525F1000-memory.dmp

    Filesize

    10.8MB

  • memory/316-4-0x000000001BB00000-0x000000001BB10000-memory.dmp

    Filesize

    64KB

  • memory/316-5-0x00007FF851B30000-0x00007FF8525F1000-memory.dmp

    Filesize

    10.8MB

  • memory/316-6-0x00007FF851B30000-0x00007FF8525F1000-memory.dmp

    Filesize

    10.8MB