Analysis

  • max time kernel
    136s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 13:17

General

  • Target

    19b5e71545275d5b8174224baead52dc.exe

  • Size

    9KB

  • MD5

    19b5e71545275d5b8174224baead52dc

  • SHA1

    25d512f637f2938259a4fac737bc82835b213b47

  • SHA256

    ca92388f3a16fe1f39e81843efea198c7f726373f3fdd71baaee2b6ccc8692ab

  • SHA512

    dfc845d2269aba4430a2ea0ef75f175b1b9dfba721d3ccb7b86f4a714fd622ca7f94cdb8bb4934d2a579280ce12e831cc394706f1fe0346f7d6f3d4b93f08700

  • SSDEEP

    192:LBksuXzHNQzSeMZZ3W93Vnjdwqzm3kkbe:AHUSeMCFnhwqK5

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\19b5e71545275d5b8174224baead52dc.exe
    "C:\Users\Admin\AppData\Local\Temp\19b5e71545275d5b8174224baead52dc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4588-0-0x0000000000390000-0x0000000000398000-memory.dmp

    Filesize

    32KB

  • memory/4588-1-0x0000000000B60000-0x0000000000B72000-memory.dmp

    Filesize

    72KB

  • memory/4588-2-0x00007FFA97A60000-0x00007FFA98521000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-3-0x0000000002580000-0x00000000025BC000-memory.dmp

    Filesize

    240KB

  • memory/4588-4-0x000000001B310000-0x000000001B320000-memory.dmp

    Filesize

    64KB

  • memory/4588-5-0x00007FFA97A60000-0x00007FFA98521000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-6-0x00007FFA97A60000-0x00007FFA98521000-memory.dmp

    Filesize

    10.8MB