Analysis
-
max time kernel
93s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04-02-2024 08:58
General
-
Target
DusBrowserInst.exe
-
Size
127KB
-
MD5
95e6582024b57ff4885652f76a66764b
-
SHA1
3a0ead166d8310503b0ed97e32f50c08ea0e2f25
-
SHA256
b29a251be022532e0e704ccde0bea5f7061f393781089a76713d8bc81e002887
-
SHA512
aa9d591e699a9975a0992e87c05bcad04c3bd931f8a9548d95425bea4c82a6752edb4260bbfc1c521f3b40ca266ee9b28ecaea3855cdb9fe8515b0a4a9c96feb
-
SSDEEP
1536:d0FJfB2gM466KlnVwQ3X2nv3Sqyi673uhOgt5m+XuYnk4aPzYvdwMPoWmPK7n:QJkL46T6n5673uzuYnr+YvRRn
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DusBrowserInst.exe"C:\Users\Admin\AppData\Local\Temp\DusBrowserInst.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2132-0-0x0000000000B60000-0x0000000000B88000-memory.dmpFilesize
160KB
-
memory/2132-3-0x000000001B8D0000-0x000000001B8E0000-memory.dmpFilesize
64KB
-
memory/2132-2-0x00007FFB39C30000-0x00007FFB3A6F1000-memory.dmpFilesize
10.8MB
-
memory/2132-1-0x0000000002CF0000-0x0000000002D0E000-memory.dmpFilesize
120KB
-
memory/2132-5-0x00007FFB39C30000-0x00007FFB3A6F1000-memory.dmpFilesize
10.8MB