Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
19-04-2024 17:39
Behavioral task
behavioral1
Sample
4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe
Resource
win10v2004-20240412-en
General
-
Target
4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe
-
Size
32KB
-
MD5
d5a90093757c1d43e97617f3880da410
-
SHA1
d7e54940e6c137abdefbe3a7f20469d5c5390361
-
SHA256
4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60
-
SHA512
8a9b7fd94849a637a32228c2b855e36f6971ea09ecc897e827ddc3b72f45c6a236eae3da70d75033e24a8567ef63b58df8112ac5ac816ee0d68189ec7482bb6f
-
SSDEEP
384:k0bUe5XB4e0XuOllMw0Q0mS03AWTxtTUFQqzF5Obbp:hT9ButlP55d3bp
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes:
4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exedescription pid process Token: SeDebugPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: 33 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe Token: SeIncBasePriorityPrivilege 4468 4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4468-0-0x0000000075510000-0x0000000075AC1000-memory.dmpFilesize
5.7MB
-
memory/4468-1-0x0000000075510000-0x0000000075AC1000-memory.dmpFilesize
5.7MB
-
memory/4468-2-0x0000000001060000-0x0000000001070000-memory.dmpFilesize
64KB
-
memory/4468-3-0x0000000075510000-0x0000000075AC1000-memory.dmpFilesize
5.7MB
-
memory/4468-4-0x0000000075510000-0x0000000075AC1000-memory.dmpFilesize
5.7MB