Analysis

  • max time kernel
    148s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/01/2024, 16:27

General

  • Target

    3e76bf1a6f5ed603dfd632041f144153.exe

  • Size

    9KB

  • MD5

    3e76bf1a6f5ed603dfd632041f144153

  • SHA1

    434f2393f58225c2cfa7888d1e8055011ae4b67b

  • SHA256

    8460550de9a6423044140fc3c8f322b9bd35c24277455d879b792fd7edf88f40

  • SHA512

    34d278f0a964195e518ce3308a69a9f44a25bec18924a43c20e74b4d8065629b7f3059e64a9fac2c42af73f74e7a0dd64e6c586b90a343553c4f5b8ef96e6049

  • SSDEEP

    192:+Bksub9MuIOieMZZ35a93Vnjdwqzl3+Fedi:vl7ieM16FnhwqBLd

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e76bf1a6f5ed603dfd632041f144153.exe
    "C:\Users\Admin\AppData\Local\Temp\3e76bf1a6f5ed603dfd632041f144153.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4124-0-0x0000000000350000-0x0000000000358000-memory.dmp

    Filesize

    32KB

  • memory/4124-1-0x00007FFE31EF0000-0x00007FFE329B1000-memory.dmp

    Filesize

    10.8MB

  • memory/4124-2-0x0000000000C20000-0x0000000000C32000-memory.dmp

    Filesize

    72KB

  • memory/4124-3-0x0000000002430000-0x000000000246C000-memory.dmp

    Filesize

    240KB

  • memory/4124-4-0x00007FFE31EF0000-0x00007FFE329B1000-memory.dmp

    Filesize

    10.8MB

  • memory/4124-5-0x0000000000B30000-0x0000000000B40000-memory.dmp

    Filesize

    64KB

  • memory/4124-6-0x000000001B340000-0x000000001B442000-memory.dmp

    Filesize

    1.0MB

  • memory/4124-7-0x000000001B340000-0x000000001B442000-memory.dmp

    Filesize

    1.0MB

  • memory/4124-8-0x0000000000B30000-0x0000000000B40000-memory.dmp

    Filesize

    64KB

  • memory/4124-16-0x00007FFE31EF0000-0x00007FFE329B1000-memory.dmp

    Filesize

    10.8MB