Overview

overview

10

Static

static

7

2 files.zip

windows10-2004-x64

1

YT.exe

windows10-2004-x64

10

lolMiner.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    508s
  • max time network
    510s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-01-2024 00:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2 files.zip

  • Size

    10.4MB

  • MD5

    6a940041c5e97564d236e6f1438e7c24

  • SHA1

    447159ae64a9797894286a8d56d280836a238c4a

  • SHA256

    edd77cd292cf423b5de8a6e7902c88d2c480a50ff879f562108b3ae433838208

  • SHA512

    87203060eb6e7934398e6958a65d056aa1654388fac03e193310ad966399eef66c030dfc30abb7fbebff23a1933eda89a8ece81ae0692ccbbad8d5136c6f536d

  • SSDEEP

    196608:yPiKBW/uqBA8V2GZP+JlY25nTFBQlGyqwOznWuMuZVORHlI/rJnG/1cX88ycWanJ:yPiKcuqWGcJlN5nxB6duZVuENG8/9LT

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\2 files.zip"
    1⤵
      PID:1976
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:4536
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3960

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3960-0-0x0000019DF0940000-0x0000019DF0950000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3960-32-0x0000019DFA010000-0x0000019DFA011000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-35-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-41-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-40-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-42-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-39-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-38-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-37-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-36-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-34-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-33-0x0000019DFA040000-0x0000019DFA041000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-16-0x0000019DF0A40000-0x0000019DF0A50000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3960-64-0x0000019DF8D90000-0x0000019DF8D91000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-68-0x0000019DF8EB0000-0x0000019DF8EB1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-67-0x0000019DF8DA0000-0x0000019DF8DA1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-66-0x0000019DF8DA0000-0x0000019DF8DA1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-52-0x0000019DF8B90000-0x0000019DF8B91000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-49-0x0000019DF8C50000-0x0000019DF8C51000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-46-0x0000019DF8C60000-0x0000019DF8C61000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-44-0x0000019DF8C50000-0x0000019DF8C51000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3960-43-0x0000019DF8C60000-0x0000019DF8C61000-memory.dmp
        Filesize

        4KB

        Download