Analysis
- max time kernel
114s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
08/02/2024, 21:30
General
- Target NitroxLauncher.exe
- Size 3.5MB
- Sample240208-1ctd2sbb4s
- SHA256 9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe"C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/404-0-0x00000191379F0000-0x0000019137D6A000-memory.dmp
memory/404-1-0x00007FF977A80000-0x00007FF978541000-memory.dmp
memory/404-2-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-3-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-4-0x0000019139B60000-0x0000019139B9E000-memory.dmp
memory/404-5-0x0000019152270000-0x0000019152296000-memory.dmp
memory/404-6-0x0000019138190000-0x0000019138198000-memory.dmp
memory/404-7-0x0000019139B20000-0x0000019139B2E000-memory.dmp
memory/404-8-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-9-0x0000019153B50000-0x0000019153B72000-memory.dmp
memory/404-10-0x0000019153B80000-0x0000019153B9C000-memory.dmp
memory/404-11-0x0000019153EF0000-0x0000019153F06000-memory.dmp
memory/404-12-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-13-0x0000019156B50000-0x0000019156C0A000-memory.dmp
memory/404-14-0x00000191562A0000-0x00000191562A8000-memory.dmp
memory/404-15-0x0000019156970000-0x00000191569A8000-memory.dmp
memory/404-16-0x0000019156330000-0x000001915633E000-memory.dmp
memory/404-18-0x00007FF977A80000-0x00007FF978541000-memory.dmp
memory/404-19-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-20-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-21-0x0000019153BB0000-0x0000019153BC0000-memory.dmp
memory/404-22-0x0000019153BB0000-0x0000019153BC0000-memory.dmp