Analysis

  • max time kernel
    139s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-01-2024 09:34

General

  • Target

    79e39d971d37d58b82a5e0f17a910d11.exe

  • Size

    9KB

  • MD5

    79e39d971d37d58b82a5e0f17a910d11

  • SHA1

    4314ad6f447cc145468f68e7daed3958082ce144

  • SHA256

    798ba1758bef9d7903cc7397d2daee187e1e13214c5dc298b4b9a4bf98ceadd0

  • SHA512

    3ebd40a9504f12f7b5f8cecb3c6f839ed99fef1a0dca896a6b2915ce64bc14fdc4424992ff676a38cb7ff2a5aefcef50c437d81ffccf9be1dcb3d3629f244e42

  • SSDEEP

    192:WBksuL9MuIafeMZZ3j93Vnjdwqzl373RZv:XlffeMlFnhwqpNZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\79e39d971d37d58b82a5e0f17a910d11.exe
    "C:\Users\Admin\AppData\Local\Temp\79e39d971d37d58b82a5e0f17a910d11.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/560-0-0x0000000000750000-0x0000000000758000-memory.dmp

    Filesize

    32KB

  • memory/560-1-0x00007FFE25640000-0x00007FFE26101000-memory.dmp

    Filesize

    10.8MB

  • memory/560-2-0x0000000000F20000-0x0000000000F32000-memory.dmp

    Filesize

    72KB

  • memory/560-3-0x000000001B270000-0x000000001B2AC000-memory.dmp

    Filesize

    240KB

  • memory/560-4-0x000000001B690000-0x000000001B6A0000-memory.dmp

    Filesize

    64KB

  • memory/560-5-0x00007FFE25640000-0x00007FFE26101000-memory.dmp

    Filesize

    10.8MB

  • memory/560-6-0x000000001B690000-0x000000001B6A0000-memory.dmp

    Filesize

    64KB

  • memory/560-7-0x00007FFE25640000-0x00007FFE26101000-memory.dmp

    Filesize

    10.8MB