Analysis

  • max time kernel
    154s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2024 02:54

General

  • Target

    Adobe.InDesign.CS5.Premium.v7.0.Incl.Keymaker-EMBRACE/keygen.exe

  • Size

    62KB

  • MD5

    f432a3513715509da4c8a31af128a5bb

  • SHA1

    2d489ca0453cef960558a7a78b0bf25b968a49d0

  • SHA256

    84a2cbe77d6e18a4393ea36f92cf92b32190b032f45ee85df00820163c32f3c6

  • SHA512

    1bfec22736620d794bcc70b9d168b3196222bc27b74789eb45c073d525c8225c4e55b1d15de1dd9daf876de0932ed922ca3e7c19ef49e9d1f1aff902b645abd5

  • SSDEEP

    1536:HfRfQmlU51+qzVOWQgep9ZUPTcRwLoWnDr2f5ET:vlUJVy3RwoWD6fK

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Adobe.InDesign.CS5.Premium.v7.0.Incl.Keymaker-EMBRACE\keygen.exe
    "C:\Users\Admin\AppData\Local\Temp\Adobe.InDesign.CS5.Premium.v7.0.Incl.Keymaker-EMBRACE\keygen.exe"
    1⤵
      PID:2288
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x2f8 0x4b8
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:4656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2288-0-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-1-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-2-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-3-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-4-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-5-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-6-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-7-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-8-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-9-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-10-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-11-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-12-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-13-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-14-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-15-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2288-16-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB