Analysis

  • max time kernel
    144s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-03-2024 01:26

General

  • Target

    70d3bf150fc60369566aa2dca2e572d86fcab86b0e2eaf5cb6db959c7cd651b2.exe

  • Size

    1.7MB

  • MD5

    be9dbd96a917b66b469ee350a4decb42

  • SHA1

    d9fb1b13d790e12bc7a9123cea05c833e3e8f8f7

  • SHA256

    70d3bf150fc60369566aa2dca2e572d86fcab86b0e2eaf5cb6db959c7cd651b2

  • SHA512

    ff0ebbb526ee44e6035c9ff207520e7e0400c2661126b1b93db9931d43da5228718112dece764c6db25ac95b74316bda8f3c041ce182b0fa0ad9ef2489d792e3

  • SSDEEP

    24576:JmIq/QmOQ+IKolT2QtEVCCP7pXFS2IvL2IvqqwAIwSma1epXF:JnqyQtEtMIO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\70d3bf150fc60369566aa2dca2e572d86fcab86b0e2eaf5cb6db959c7cd651b2.exe
    "C:\Users\Admin\AppData\Local\Temp\70d3bf150fc60369566aa2dca2e572d86fcab86b0e2eaf5cb6db959c7cd651b2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1264-0-0x0000020979270000-0x0000020979426000-memory.dmp

    Filesize

    1.7MB

  • memory/1264-1-0x00007FF99B3A0000-0x00007FF99BE61000-memory.dmp

    Filesize

    10.8MB

  • memory/1264-2-0x000002097BBF0000-0x000002097BC00000-memory.dmp

    Filesize

    64KB

  • memory/1264-3-0x00007FF99B3A0000-0x00007FF99BE61000-memory.dmp

    Filesize

    10.8MB