Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-04-2024 07:58

General

  • Target

    2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675.exe

  • Size

    776KB

  • MD5

    1b28e9a5333b090279dfd0c36f78cd76

  • SHA1

    55133014f4f83b769b5d2e9b8f44fafcde893830

  • SHA256

    2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675

  • SHA512

    ac558d09a8207b9141308aa8532e90611c3cfa99e68a7028d3d9e8159b45825ed8e8b53c0dbf677c39c5e1369b05fe2d57d45cdfbf6113058ca3e916f38a76a0

  • SSDEEP

    24576:6mjl2AcvvGFCAYMFwRy64FVwUR/1qHDS:6o2bGEAYkwo6gVZR/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675.exe
    "C:\Users\Admin\AppData\Local\Temp\2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3524-0-0x00007FF677BD0000-0x00007FF677D7C000-memory.dmp

    Filesize

    1.7MB

  • memory/3524-1-0x000001D6F8070000-0x000001D6F80AE000-memory.dmp

    Filesize

    248KB

  • memory/3524-2-0x00007FFA75000000-0x00007FFA75AC1000-memory.dmp

    Filesize

    10.8MB

  • memory/3524-3-0x000001D6F85B0000-0x000001D6F85C0000-memory.dmp

    Filesize

    64KB

  • memory/3524-4-0x000001D6F85B0000-0x000001D6F85C0000-memory.dmp

    Filesize

    64KB

  • memory/3524-5-0x000001D6F85B0000-0x000001D6F85C0000-memory.dmp

    Filesize

    64KB

  • memory/3524-6-0x000001D6F85B0000-0x000001D6F85C0000-memory.dmp

    Filesize

    64KB

  • memory/3524-7-0x000001D6F85B0000-0x000001D6F85C0000-memory.dmp

    Filesize

    64KB

  • memory/3524-8-0x00007FF677BD0000-0x00007FF677D7C000-memory.dmp

    Filesize

    1.7MB

  • memory/3524-9-0x00007FFA75000000-0x00007FFA75AC1000-memory.dmp

    Filesize

    10.8MB