Analysis
- max time kernel
294s - max time network
294s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
- submitted
06/05/2024, 16:49
General
- Target update.exe
- Size 3.2MB
- Sample240506-vb7bmaae7z
- SHA256 014c71aaf8d2bad59079b20cfa748cc4ee25fef57d3aafd4864410fb05b2c23f
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\update.exe"C:\Users\Admin\AppData\Local\Temp\update.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\SystemBak\update.exeC:\SystemBak\update.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
update.exe
memory/1044-0-0x0000000140000000-0x0000000140337000-memory.dmp
memory/1044-4-0x0000000140000000-0x0000000140337000-memory.dmp
memory/2184-3-0x0000000140000000-0x0000000140337000-memory.dmp
memory/2184-6-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-5-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-7-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-50-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-65-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-64-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-63-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-62-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-61-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-60-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-59-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-58-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-57-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-56-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-55-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-54-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-53-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-52-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-49-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-47-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-46-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-44-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-42-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-41-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-40-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-39-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-38-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-37-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-36-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-35-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-34-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-33-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-32-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-30-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-29-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-28-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-27-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-26-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-25-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-24-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-23-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-21-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-20-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-19-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-18-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-17-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-15-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-14-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-13-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-12-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-11-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-10-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-8-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-51-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-48-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-45-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-43-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-31-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-22-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-16-0x0000000000CB0000-0x0000000000D37000-memory.dmp
memory/2184-9-0x0000000000CB0000-0x0000000000D37000-memory.dmp