Analysis

  • max time kernel
    149s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 13:19

General

  • Target

    4e688a16a561c472adfcf6e31686a31e.exe

  • Size

    9KB

  • MD5

    4e688a16a561c472adfcf6e31686a31e

  • SHA1

    b482cf32ad0cf9c2aa30ff608f1fd49f8734e996

  • SHA256

    43d8c1821f84bf4379865d37b967157d406abee8e4ff86ddf398d4922ea7ef4a

  • SHA512

    2cd798a1f1cab22e258f0e7b73b9ed95db8a80b3d254b459ac9532d58bbd648a1d4a0499fef46298758d95917a78551f90348603d095658225d10c287e7efccf

  • SSDEEP

    192:EBksuLPY82gQv5F4Z4tyeMZZ3T93VnjdwCzk43gAnz:s82l4Z4tyeMlFnhwCQ4Tn

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4e688a16a561c472adfcf6e31686a31e.exe
    "C:\Users\Admin\AppData\Local\Temp\4e688a16a561c472adfcf6e31686a31e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1488-0-0x0000000000AA0000-0x0000000000AA8000-memory.dmp

          Filesize

          32KB

        • memory/1488-3-0x000000001B580000-0x000000001B5BC000-memory.dmp

          Filesize

          240KB

        • memory/1488-2-0x00007FFE98F40000-0x00007FFE99A01000-memory.dmp

          Filesize

          10.8MB

        • memory/1488-4-0x000000001B990000-0x000000001B9A0000-memory.dmp

          Filesize

          64KB

        • memory/1488-1-0x000000001B520000-0x000000001B532000-memory.dmp

          Filesize

          72KB

        • memory/1488-5-0x00007FFE98F40000-0x00007FFE99A01000-memory.dmp

          Filesize

          10.8MB

        • memory/1488-6-0x00007FFE98F40000-0x00007FFE99A01000-memory.dmp

          Filesize

          10.8MB