Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
04/03/2024, 05:35
General
- Target b157ce6915fbdb33b851d1459775eee5.exe
- Size 1.0MB
- Sample240304-gadq2abb4y
- SHA256 692ac3a2c105d48aac17ecc7f7c9eb239c1b6672c263809b74ceabf95efd37b8
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b157ce6915fbdb33b851d1459775eee5.exe"C:\Users\Admin\AppData\Local\Temp\b157ce6915fbdb33b851d1459775eee5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3732-0-0x00000237435D0000-0x00000237436DE000-memory.dmp
memory/3732-1-0x00007FFEB1B20000-0x00007FFEB25E1000-memory.dmp
memory/3732-2-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-3-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-4-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-7-0x000002375DDB0000-0x000002375DF59000-memory.dmp
memory/3732-8-0x00007FFEB1B20000-0x00007FFEB25E1000-memory.dmp
memory/3732-10-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-11-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-12-0x000002375DC30000-0x000002375DC40000-memory.dmp
memory/3732-23-0x000002375DDB0000-0x000002375DF59000-memory.dmp