Analysis

  • max time kernel
    139s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/03/2024, 02:26

General

  • Target

    38008e40d5610b44c1469a93b82643415b10578d18b6535cb67bd5927ccd24e9.exe

  • Size

    1.7MB

  • MD5

    1e5409ab97b978d1c18438908ecd801c

  • SHA1

    f148c6345480572f4e3af25429342ae5eca13ced

  • SHA256

    38008e40d5610b44c1469a93b82643415b10578d18b6535cb67bd5927ccd24e9

  • SHA512

    065c73e547510ef63516920ff23870b7db09c287e5cdd7730afd17e99e5671063689dfe492960945466b69867bb9ce742e06269d2088b3156d8521fa9e5cc8ab

  • SSDEEP

    24576:7vmHl4iKj2XlJ6Zet/IBL+XmF3yRTlpXFX2IvL2IvLvqwAPBODpXF:7eHHt/Iua

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38008e40d5610b44c1469a93b82643415b10578d18b6535cb67bd5927ccd24e9.exe
    "C:\Users\Admin\AppData\Local\Temp\38008e40d5610b44c1469a93b82643415b10578d18b6535cb67bd5927ccd24e9.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1576

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1576-0-0x0000018F9C680000-0x0000018F9C83E000-memory.dmp

          Filesize

          1.7MB

        • memory/1576-1-0x00007FFA8BA20000-0x00007FFA8C4E1000-memory.dmp

          Filesize

          10.8MB

        • memory/1576-2-0x0000018F9E3A0000-0x0000018F9E3B0000-memory.dmp

          Filesize

          64KB

        • memory/1576-3-0x00007FFA8BA20000-0x00007FFA8C4E1000-memory.dmp

          Filesize

          10.8MB