fcfcea85a15e4cfeb120fb025974a9c3c115bba77f1ed860782861bec4e0b926 | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-04-2024 19:38

Sharing

Report Analysis Logs

General

Target

DataMaster Launcher.exe
Size

81KB
MD5

09a22b3fdb563dc3b060b376491bb4c3
SHA1

a53a8c8c7634430a056183fc02f80a49861825ef
SHA256

b6899991ab571815564a445d3e2d7cc68c1ca2ccbd9779a24794216e81691c87
SHA512

294ed5609e072b66f9b161583057c488d069dedb4f85077df11feb98024d9740533e656860017a33be2daf5cdc7787a4df212b19a1da962de4805788572debb1
SSDEEP

768:qJjSa2cr7NkwVqKira6FR3WSopjSa2cr7NkwVqKira6:gGa2ceXpzqSopGa2ceXpz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

DataMaster Launcher.exe

pid process

2804 DataMaster Launcher.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

DataMaster Launcher.exe

description pid process

Token: SeDebugPrivilege 2804 DataMaster Launcher.exe

C:\Users\Admin\AppData\Local\Temp\DataMaster Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\DataMaster Launcher.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2804-0-0x0000000074640000-0x0000000074BF1000-memory.dmp

Filesize
5.7MB

Download
memory/2804-1-0x0000000002860000-0x0000000002870000-memory.dmp

Filesize
64KB

Download
memory/2804-2-0x0000000074640000-0x0000000074BF1000-memory.dmp

Filesize
5.7MB

Download
memory/2804-4-0x0000000074640000-0x0000000074BF1000-memory.dmp

Filesize
5.7MB

Download