Analysis
- max time kernel
141s - max time network
122s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
15/01/2024, 01:13
General
- Target af42245eab0bb357772e52740e298bc64cce2acb2889b4356cf3136386e36422.exe
- Size 2.0MB
- Sample240115-bld82seecr
- SHA256 af42245eab0bb357772e52740e298bc64cce2acb2889b4356cf3136386e36422
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af42245eab0bb357772e52740e298bc64cce2acb2889b4356cf3136386e36422.exe"C:\Users\Admin\AppData\Local\Temp\af42245eab0bb357772e52740e298bc64cce2acb2889b4356cf3136386e36422.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3764-0-0x000001F231BD0000-0x000001F231DCE000-memory.dmp
memory/3764-1-0x00007FFEC2540000-0x00007FFEC3001000-memory.dmp
memory/3764-2-0x000001F2321A0000-0x000001F2321B0000-memory.dmp
memory/3764-4-0x000001F2321A0000-0x000001F2321B0000-memory.dmp
memory/3764-5-0x000001F2321A0000-0x000001F2321B0000-memory.dmp
memory/3764-6-0x000001F2535C0000-0x000001F25372A000-memory.dmp
memory/3764-7-0x00007FFEC2540000-0x00007FFEC3001000-memory.dmp
memory/3764-8-0x000001F2321A0000-0x000001F2321B0000-memory.dmp
memory/3764-10-0x000001F2321A0000-0x000001F2321B0000-memory.dmp
memory/3764-11-0x000001F2321A0000-0x000001F2321B0000-memory.dmp