Analysis

  • max time kernel
    130s
  • max time network
    135s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    16-03-2024 17:40

General

  • Target

    unsolved.exe

  • Size

    177.8MB

  • MD5

    8e663cbb51a94fdba9526c09585b6ad3

  • SHA1

    aeee37f82d30e5eaee431aec3b00a50667167e23

  • SHA256

    9a55f8490f17e095899df8bd57cbc2e8a451f01573d3763fb87d9186addc7d4e

  • SHA512

    3733a63bf9e0e6f459790222cf450391d25e0cf44543f8e108dbc071791d03355d752cbeca18071795f2468953eac361c031ac9e5b497a1b4e7fa1955ea90b0a

  • SSDEEP

    786432:kBG2xdnnMEj5UiVpARDi9d0fR5Sz1aB2A5oKZAg4U6wQrlYwJU/smgEkKodTlCtB:kY2xtMEj5ULDi/1ap3ZAzUvwi/ZgfCtB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\unsolved.exe
    "C:\Users\Admin\AppData\Local\Temp\unsolved.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4816-8-0x000001F4F6520000-0x000001F4F7070000-memory.dmp

    Filesize

    11.3MB

  • memory/4816-14-0x000001B460D20000-0x000001B460D40000-memory.dmp

    Filesize

    128KB

  • memory/4816-19-0x000001F4F77B0000-0x000001F4F77F0000-memory.dmp

    Filesize

    256KB

  • memory/4816-24-0x000001F4F7850000-0x000001F4F78A0000-memory.dmp

    Filesize

    320KB

  • memory/4816-29-0x000001F4F78A0000-0x000001F4F78C0000-memory.dmp

    Filesize

    128KB

  • memory/4816-39-0x000001F4F7A00000-0x000001F4F7A30000-memory.dmp

    Filesize

    192KB

  • memory/4816-34-0x000001F4F7950000-0x000001F4F79D0000-memory.dmp

    Filesize

    512KB

  • memory/4816-49-0x000001F4F7A90000-0x000001F4F7AC0000-memory.dmp

    Filesize

    192KB

  • memory/4816-44-0x000001B460D70000-0x000001B460D80000-memory.dmp

    Filesize

    64KB

  • memory/4816-61-0x000001F4F95B0000-0x000001F4F96C0000-memory.dmp

    Filesize

    1.1MB

  • memory/4816-66-0x000001F4F97A0000-0x000001F4F9870000-memory.dmp

    Filesize

    832KB

  • memory/4816-56-0x000001B460CF0000-0x000001B460D00000-memory.dmp

    Filesize

    64KB