Analysis

  • max time kernel
    93s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 01:02

General

  • Target

    019b1767e76539b91fdb7f3feb76457f8ca509dec83bbb0ecddbe49139da25a3.exe

  • Size

    111KB

  • MD5

    a45459f165bc4fe6000f101b77674b67

  • SHA1

    9c1bbbaa037f961d6d856d31138cdc2a76c4ab64

  • SHA256

    019b1767e76539b91fdb7f3feb76457f8ca509dec83bbb0ecddbe49139da25a3

  • SHA512

    652605732a92c4481a26c1f9fbf7eb6e27bd695e6b8cd574c26259107e4d17a29226afc07a4dec4fedcb9d179abc2c42690c9d6b673da550c73f7ee21868ac9b

  • SSDEEP

    1536:jW89sVhmEttxuecocrdfLo6hskY1FM0AfAy8I2wwSvRn8mKH5ISCNftg:q8iVffcocrdfLo6hRYPgfAZI2DSZ8E

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\019b1767e76539b91fdb7f3feb76457f8ca509dec83bbb0ecddbe49139da25a3.exe
    "C:\Users\Admin\AppData\Local\Temp\019b1767e76539b91fdb7f3feb76457f8ca509dec83bbb0ecddbe49139da25a3.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3220-0-0x0000000000FF0000-0x0000000001010000-memory.dmp

          Filesize

          128KB

        • memory/3220-1-0x00007FFD06B13000-0x00007FFD06B15000-memory.dmp

          Filesize

          8KB

        • memory/3220-2-0x00007FFD06B10000-0x00007FFD075D1000-memory.dmp

          Filesize

          10.8MB

        • memory/3220-3-0x00007FFD06B10000-0x00007FFD075D1000-memory.dmp

          Filesize

          10.8MB