Analysis
- max time kernel
179s - max time network
203s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
08/01/2024, 01:04
General
- Target 5b7fd43e2d31ccabed8b5ea8521a2aad5cdcdd75ea4a5a84e00150a1b1bd1ba9.exe
- Size 9.8MB
- Sample240108-be1hpsaef7
- SHA256 5b7fd43e2d31ccabed8b5ea8521a2aad5cdcdd75ea4a5a84e00150a1b1bd1ba9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b7fd43e2d31ccabed8b5ea8521a2aad5cdcdd75ea4a5a84e00150a1b1bd1ba9.exe"C:\Users\Admin\AppData\Local\Temp\5b7fd43e2d31ccabed8b5ea8521a2aad5cdcdd75ea4a5a84e00150a1b1bd1ba9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2388-0-0x000001E9C53F0000-0x000001E9C5DBE000-memory.dmp
memory/2388-1-0x00007FFEBC160000-0x00007FFEBCC21000-memory.dmp
memory/2388-2-0x00007FFEBC160000-0x00007FFEBCC21000-memory.dmp
memory/2388-3-0x000001E9C79E0000-0x000001E9C79F0000-memory.dmp
memory/2388-4-0x000001E9C79F0000-0x000001E9C7A36000-memory.dmp
memory/2388-5-0x000001E9C79E0000-0x000001E9C79F0000-memory.dmp
memory/2388-6-0x000001E9C79B0000-0x000001E9C79B8000-memory.dmp
memory/2388-7-0x000001E9C79C0000-0x000001E9C79CC000-memory.dmp
memory/2388-8-0x000001E9C7B60000-0x000001E9C7B6A000-memory.dmp
memory/2388-9-0x000001E9E0340000-0x000001E9E0348000-memory.dmp
memory/2388-10-0x000001E9E12C0000-0x000001E9E14BA000-memory.dmp
memory/2388-11-0x000001E9C79D0000-0x000001E9C79DE000-memory.dmp
memory/2388-12-0x000001E9E14C0000-0x000001E9E14C8000-memory.dmp
memory/2388-19-0x000001E9E1580000-0x000001E9E1588000-memory.dmp
memory/2388-20-0x000001E9E1590000-0x000001E9E1598000-memory.dmp
memory/2388-21-0x000001E9E15A0000-0x000001E9E15A8000-memory.dmp
memory/2388-22-0x000001E9E15B0000-0x000001E9E15B8000-memory.dmp
memory/2388-23-0x000001E9E15C0000-0x000001E9E15C8000-memory.dmp
memory/2388-24-0x000001E9E15D0000-0x000001E9E15D8000-memory.dmp
memory/2388-25-0x000001E9E15E0000-0x000001E9E15F8000-memory.dmp
memory/2388-26-0x000001E9E1570000-0x000001E9E157A000-memory.dmp
memory/2388-27-0x000001E9E1600000-0x000001E9E164C000-memory.dmp
memory/2388-28-0x000001E9E1850000-0x000001E9E1858000-memory.dmp
memory/2388-29-0x000001E9E19A0000-0x000001E9E1A50000-memory.dmp
memory/2388-30-0x000001E9E1BC0000-0x000001E9E1BC8000-memory.dmp
memory/2388-31-0x000001E9E5560000-0x000001E9E5598000-memory.dmp
memory/2388-32-0x000001E9E1D80000-0x000001E9E1D8E000-memory.dmp