Analysis

  • max time kernel
    1381s
  • max time network
    1176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/03/2024, 21:46

General

  • Target

    Flameware_Permanent.exe

  • Size

    11.7MB

  • MD5

    03a23e6b45e5e25b0833500276e28773

  • SHA1

    c7630c78c0833dbf32bbb540c0d6a1b5ddfe5bef

  • SHA256

    fb152033f780c1b6da60b9610ede01ba9088940e580c904fbc932e4e4e9d0a3f

  • SHA512

    28b19ada9007a4460d74948ce3de24111e7782dd7400899bafb78bd90f5b27d9a464a41825743343ee940d98c6b17e4e6842ff6e8b390af7a3764e6c0564b7ed

  • SSDEEP

    196608:h8VVa31W903eV4QtMToEuGxgh858F0ibfU0SEYgABLbk93t8gkSI+qWCnv:hlW+eGQtMTozGxu8C0ibfOknzkSBqV

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Flameware_Permanent.exe
    "C:\Users\Admin\AppData\Local\Temp\Flameware_Permanent.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1704-0-0x000002A6F7E90000-0x000002A6F8A50000-memory.dmp

          Filesize

          11.8MB

        • memory/1704-1-0x00007FFEBC3F0000-0x00007FFEBCEB1000-memory.dmp

          Filesize

          10.8MB

        • memory/1704-2-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB

        • memory/1704-3-0x000002A6FAF80000-0x000002A6FB0CE000-memory.dmp

          Filesize

          1.3MB

        • memory/1704-4-0x000002A6FAF50000-0x000002A6FAF64000-memory.dmp

          Filesize

          80KB

        • memory/1704-5-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB

        • memory/1704-6-0x000002A6FE600000-0x000002A6FE612000-memory.dmp

          Filesize

          72KB

        • memory/1704-8-0x000002A6FBB50000-0x000002A6FBB8C000-memory.dmp

          Filesize

          240KB

        • memory/1704-9-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB

        • memory/1704-10-0x00007FFEBC3F0000-0x00007FFEBCEB1000-memory.dmp

          Filesize

          10.8MB

        • memory/1704-11-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB

        • memory/1704-12-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB

        • memory/1704-13-0x000002A6FAF70000-0x000002A6FAF80000-memory.dmp

          Filesize

          64KB