Analysis

  • max time kernel
    137s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-04-2024 16:45

General

  • Target

    CFDI042024983859304465214/CFDI042024983859304465214.exe

  • Size

    255KB

  • MD5

    4d7d4d92dc7d86b72abf81821ff83837

  • SHA1

    9672cade96c657a8860d60923afdbe4c46a2935d

  • SHA256

    b60eb62f6c24d4a495a0dab95cc49624ac5099a2cc21f8bd010a410401ab8cc3

  • SHA512

    6f00518b4b261f49c4f3f16858c728dbffc34c3768769f78c5346748d87daf488eafd0755bc8833a2fea7bf17ea6247cf41263471b2ed310e857751271cc856e

  • SSDEEP

    3072:Oao0QHGUQWWimj9q/NLpj/WWqvAw2XpFU4rwOeOubZS5f02RFi6x2u23dT:1oZTTWxxqVpqWVRXfVZ02biArSd

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CFDI042024983859304465214\CFDI042024983859304465214.exe
    "C:\Users\Admin\AppData\Local\Temp\CFDI042024983859304465214\CFDI042024983859304465214.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2928-0-0x0000000005020000-0x00000000050B6000-memory.dmp

    Filesize

    600KB

  • memory/2928-1-0x0000000074D20000-0x00000000754D0000-memory.dmp

    Filesize

    7.7MB

  • memory/2928-2-0x00000000051C0000-0x0000000005234000-memory.dmp

    Filesize

    464KB

  • memory/2928-3-0x0000000005280000-0x0000000005290000-memory.dmp

    Filesize

    64KB

  • memory/2928-4-0x0000000009DC0000-0x000000000A364000-memory.dmp

    Filesize

    5.6MB

  • memory/2928-5-0x0000000005340000-0x00000000053A6000-memory.dmp

    Filesize

    408KB

  • memory/2928-6-0x0000000000670000-0x00000000006B0000-memory.dmp

    Filesize

    256KB

  • memory/2928-7-0x0000000005F60000-0x0000000005F7A000-memory.dmp

    Filesize

    104KB

  • memory/2928-8-0x00000000060E0000-0x000000000623A000-memory.dmp

    Filesize

    1.4MB

  • memory/2928-10-0x0000000074D20000-0x00000000754D0000-memory.dmp

    Filesize

    7.7MB