Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-05-2024 17:29

General

  • Target

    DwmLutGUI.exe

  • Size

    41KB

  • MD5

    3b4757e1a391ad8afe84a433ea044335

  • SHA1

    1d04873b685e26377ed7be16f1dea43f149dd07e

  • SHA256

    5bd14307f344f802ba2a43f18b118cd15fd2056c2e01dfeaa7b16afbe637e280

  • SHA512

    a4f95040ebb2839b6f87dacd687e22110e6f02c5a7032f4d9645c20b4bfe58cd8fb39eec9e1c59f4cb7fb6e6a23aa89e06d16713fa5fed337f0b192353574a3a

  • SSDEEP

    768:Xu3QbzTyrqZmr3dYzBA9dMFciV5yQIXXFABQJVDDDDDRVDDDDDsetYcFwVc6K:XaQXurqZmr3dEKjit5yQIXVABQ0iwVcl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DwmLutGUI.exe
    "C:\Users\Admin\AppData\Local\Temp\DwmLutGUI.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4460-0-0x00007FFBA3163000-0x00007FFBA3165000-memory.dmp

    Filesize

    8KB

  • memory/4460-1-0x00000230F4280000-0x00000230F428E000-memory.dmp

    Filesize

    56KB

  • memory/4460-2-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4460-3-0x00000230F67D0000-0x00000230F67E6000-memory.dmp

    Filesize

    88KB

  • memory/4460-4-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4460-5-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4460-6-0x00000230FA510000-0x00000230FA518000-memory.dmp

    Filesize

    32KB

  • memory/4460-7-0x00000230FA520000-0x00000230FA528000-memory.dmp

    Filesize

    32KB

  • memory/4460-8-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

    Filesize

    10.8MB

  • memory/4460-9-0x00000230FA5C0000-0x00000230FA5F8000-memory.dmp

    Filesize

    224KB

  • memory/4460-10-0x00000230FA590000-0x00000230FA59E000-memory.dmp

    Filesize

    56KB

  • memory/4460-12-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

    Filesize

    10.8MB