Analysis

  • max time kernel
    144s
  • max time network
    156s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    02-04-2024 20:56

General

  • Target

    $PLUGINSDIR/un.exe

  • Size

    11.7MB

  • MD5

    df1309a17c013851233ef53be49defce

  • SHA1

    48f4613e2122982b24f3baad4d3273be2a5d4cee

  • SHA256

    c4ba21a2b39802e3baf0900ab0f859c197c7abfc2178d8e2a6c841b2e3595861

  • SHA512

    38aa28379e0154b9155b04453425265bf075bab9f255b29ad8b2e5942a9b287850db651b958aafd5a9d27519f4edcc815e3b9664d2be896e14d04c10118228d5

  • SSDEEP

    196608:ZKfCvvcESaXBiHaR+EKaIk6xbjkP6ISLdxI/7zvhbYrsCJnDN5PbXy8UO+O4WgDx:ZKRWoHaRN5jNP6ISgzpErnD7bXy8h+OK

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\un.exe
    "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\un.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4900-0-0x0000000074D40000-0x00000000754F1000-memory.dmp

    Filesize

    7.7MB

  • memory/4900-1-0x0000000000A40000-0x0000000001600000-memory.dmp

    Filesize

    11.8MB

  • memory/4900-2-0x0000000006040000-0x0000000006050000-memory.dmp

    Filesize

    64KB

  • memory/4900-4-0x0000000074D40000-0x00000000754F1000-memory.dmp

    Filesize

    7.7MB