Analysis

  • max time kernel
    143s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 01:38

General

  • Target

    0f9c2cec2b0bc320397ad82512541775eb52e9c5528f4dd5cba98333528e2a65.exe

  • Size

    4.9MB

  • MD5

    cf078542cea63ec4518b45401a53d38b

  • SHA1

    594b09c491492ea2457a519d2362b7c5f91edb10

  • SHA256

    0f9c2cec2b0bc320397ad82512541775eb52e9c5528f4dd5cba98333528e2a65

  • SHA512

    6aadc15100427fb937a941f385dfdb8bd9bff7fc3d9c2e0216b657c189142aac518befeca10876ba955761eb0b698d7879d12655333fe0fa8b70bbaf631e3ae3

  • SSDEEP

    98304:j3bDoV1lE8TUoaud7LSAFvKPfiY2XXOeuW3s2v3CC/GGekCYc:rOl5ULud/nRCfiZXXOm3x/GGek0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f9c2cec2b0bc320397ad82512541775eb52e9c5528f4dd5cba98333528e2a65.exe
    "C:\Users\Admin\AppData\Local\Temp\0f9c2cec2b0bc320397ad82512541775eb52e9c5528f4dd5cba98333528e2a65.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1076-0-0x00000000058C0000-0x0000000005A1E000-memory.dmp

          Filesize

          1.4MB

        • memory/1076-1-0x0000000074CF0000-0x00000000754A0000-memory.dmp

          Filesize

          7.7MB

        • memory/1076-4-0x0000000005A30000-0x0000000005A40000-memory.dmp

          Filesize

          64KB

        • memory/1076-3-0x0000000005A30000-0x0000000005A40000-memory.dmp

          Filesize

          64KB

        • memory/1076-2-0x0000000005A30000-0x0000000005A40000-memory.dmp

          Filesize

          64KB

        • memory/1076-5-0x0000000005FF0000-0x0000000006594000-memory.dmp

          Filesize

          5.6MB

        • memory/1076-6-0x0000000005AE0000-0x0000000005B72000-memory.dmp

          Filesize

          584KB

        • memory/1076-7-0x0000000005A40000-0x0000000005A90000-memory.dmp

          Filesize

          320KB

        • memory/1076-10-0x0000000074CF0000-0x00000000754A0000-memory.dmp

          Filesize

          7.7MB