Resubmissions

12/05/2024, 08:14

240512-j4zlpsbc29 6

12/05/2024, 08:10

240512-j229tabb59 6

Analysis

  • max time kernel
    149s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/05/2024, 08:10

General

  • Target

    idle_master_extended_v1.10.0/IdleMasterExtended.exe

  • Size

    1.6MB

  • MD5

    e7477be0d0dd79b5742601968dc2a3fe

  • SHA1

    b8da7374a19c4b57c731f64a96930162e4a522c5

  • SHA256

    01d02247498fc63c3bafa501afb70344ea62afd8698a1239fc5d2af4e54cba23

  • SHA512

    6b834e25613b9c45974baa6e1c4f022489c2a4cec7ccb17ab06c09e148d3f6827f7a7801f4d44891b637df2534d8ac3e913c6ff8a5e29633c469444a83f60140

  • SSDEEP

    12288:EEkFtu4BTe44JY0AMI7jU17mOx2H+xRupUliqYKs84+wPNSljyCCEe:Ba0OjCne+7upUl5Rs85yCCEe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\IdleMasterExtended.exe
    "C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\IdleMasterExtended.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of AdjustPrivilegeToken
    PID:3188

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3188-0-0x00000000750BE000-0x00000000750BF000-memory.dmp

    Filesize

    4KB

  • memory/3188-1-0x0000000000EC0000-0x0000000001062000-memory.dmp

    Filesize

    1.6MB

  • memory/3188-2-0x0000000006070000-0x0000000006614000-memory.dmp

    Filesize

    5.6MB

  • memory/3188-3-0x0000000005A00000-0x0000000005A92000-memory.dmp

    Filesize

    584KB

  • memory/3188-4-0x0000000005BE0000-0x0000000005BEA000-memory.dmp

    Filesize

    40KB

  • memory/3188-5-0x00000000750B0000-0x0000000075860000-memory.dmp

    Filesize

    7.7MB

  • memory/3188-6-0x00000000750B0000-0x0000000075860000-memory.dmp

    Filesize

    7.7MB

  • memory/3188-9-0x0000000009990000-0x00000000099DA000-memory.dmp

    Filesize

    296KB

  • memory/3188-10-0x00000000750BE000-0x00000000750BF000-memory.dmp

    Filesize

    4KB

  • memory/3188-11-0x00000000750B0000-0x0000000075860000-memory.dmp

    Filesize

    7.7MB

  • memory/3188-12-0x00000000750B0000-0x0000000075860000-memory.dmp

    Filesize

    7.7MB