Analysis

  • max time kernel
    2s
  • max time network
    75s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-01-2024 10:21

General

  • Target

    a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe

  • Size

    1.3MB

  • MD5

    09eddda58cfebe3c47fb82d17f902432

  • SHA1

    c0e9feb9232323e97c2fc7a73dc6d36894907a70

  • SHA256

    a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963

  • SHA512

    e9ba3457b628e174212906c8f9d8377089b09897c9bafb28e014c9f739a1c0ae1d4666170b90f52d1ffa9d0024edda142c2355321f1af36aedadfe27155bdda0

  • SSDEEP

    24576:Bhhjuqpe3kP4mYwVoiPYq/a+K/4XfXeNKFyakDSVXT5XVAMg:5juLkAmFVoIYq++0KF1pXT5XVAMg

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe
    "C:\Users\Admin\AppData\Local\Temp\a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2444-0-0x000001F47EFA0000-0x000001F47EFD4000-memory.dmp

    Filesize

    208KB

  • memory/2444-4-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB

  • memory/2444-3-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB

  • memory/2444-2-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB

  • memory/2444-1-0x00007FF8BDC20000-0x00007FF8BE6E1000-memory.dmp

    Filesize

    10.8MB

  • memory/2444-5-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB

  • memory/2444-6-0x000001F47EFF0000-0x000001F47EFF8000-memory.dmp

    Filesize

    32KB

  • memory/2444-8-0x000001F47F010000-0x000001F47F01E000-memory.dmp

    Filesize

    56KB

  • memory/2444-7-0x000001F47F9C0000-0x000001F47F9F8000-memory.dmp

    Filesize

    224KB

  • memory/2444-21-0x00007FF8BDC20000-0x00007FF8BE6E1000-memory.dmp

    Filesize

    10.8MB

  • memory/2444-22-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB

  • memory/2444-23-0x000001F47F000000-0x000001F47F010000-memory.dmp

    Filesize

    64KB