Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/02/2024, 21:23

General

  • Target

    Baixaki_Mouse Recorder Pro 2_v1.959.506.18.3.exe

  • Size

    1.4MB

  • MD5

    fcfe87ba36022abb969fb2c3d362aac0

  • SHA1

    6d5d6b2bc43472c30a60bd924ee382c0f24a3d85

  • SHA256

    c55e8c66b34447a3ded2fc2ace928241b8d4f7b959ce887fd206274858a055e4

  • SHA512

    f333a9450dc97e10f1a32183c40aff70f694ef6abb409977ae57d7da98353eddc7fe625dde08bfb35a07400a1e1dd24921dc5fd438b0479be5bf7abb25336e51

  • SSDEEP

    12288:qyzGJR+Xtky04nDKBp4BF/xCLy3nF2ZKe+Cy3nF2Zn9yBnF2ZMW:NNc8FZoy12ZKe+Cy12Zn9y32ZMW

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Baixaki_Mouse Recorder Pro 2_v1.959.506.18.3.exe
    "C:\Users\Admin\AppData\Local\Temp\Baixaki_Mouse Recorder Pro 2_v1.959.506.18.3.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1420

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1420-0-0x0000000000A30000-0x0000000000B94000-memory.dmp

          Filesize

          1.4MB

        • memory/1420-1-0x00007FF91E450000-0x00007FF91EF11000-memory.dmp

          Filesize

          10.8MB

        • memory/1420-2-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-3-0x000000001C1B0000-0x000000001C6D8000-memory.dmp

          Filesize

          5.2MB

        • memory/1420-4-0x000000001BE30000-0x000000001BE80000-memory.dmp

          Filesize

          320KB

        • memory/1420-5-0x000000001BF40000-0x000000001BFF2000-memory.dmp

          Filesize

          712KB

        • memory/1420-6-0x000000001BE00000-0x000000001BE12000-memory.dmp

          Filesize

          72KB

        • memory/1420-7-0x000000001BE80000-0x000000001BEA0000-memory.dmp

          Filesize

          128KB

        • memory/1420-8-0x000000001BEE0000-0x000000001BF12000-memory.dmp

          Filesize

          200KB

        • memory/1420-9-0x000000001BEA0000-0x000000001BEBE000-memory.dmp

          Filesize

          120KB

        • memory/1420-10-0x000000001BEC0000-0x000000001BEDA000-memory.dmp

          Filesize

          104KB

        • memory/1420-11-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-12-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-13-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-14-0x00007FF91E450000-0x00007FF91EF11000-memory.dmp

          Filesize

          10.8MB

        • memory/1420-15-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-16-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-17-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-18-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB

        • memory/1420-19-0x0000000001490000-0x00000000014A0000-memory.dmp

          Filesize

          64KB