Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22-05-2024 01:44
General
-
Target
68d48d53b40a2c1c905dcfbb4062066dfdf38f24440da5ac3a679e466a96bf1e.exe
-
Size
461KB
-
MD5
3c5eeab605bf86d93dcd01aa912efa54
-
SHA1
c24a07068c65fbfa25ee47246703dd4b0bb5e8d2
-
SHA256
68d48d53b40a2c1c905dcfbb4062066dfdf38f24440da5ac3a679e466a96bf1e
-
SHA512
8ac3e8098970cbdcb55acba7e5b32d5c7422b5f67376d0f1f5956a6ef052e3c29dfea2f4f154c8856d97b2b3fc132771444d7c3bfc1fb2a8331fbaa835747f30
-
SSDEEP
6144:wSvm6/3XnxCPjtLXzgTYLvRkV4foyR2MDk7Tr/pjhpH3565Xnnz/UYx3c7XV:VYXFD+4fzR2zg4
Score
9/10
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\68d48d53b40a2c1c905dcfbb4062066dfdf38f24440da5ac3a679e466a96bf1e.exe"C:\Users\Admin\AppData\Local\Temp\68d48d53b40a2c1c905dcfbb4062066dfdf38f24440da5ac3a679e466a96bf1e.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/900-0-0x000000007474E000-0x000000007474F000-memory.dmpFilesize
4KB
-
memory/900-1-0x0000000000100000-0x0000000000176000-memory.dmpFilesize
472KB
-
memory/900-2-0x0000000074740000-0x0000000074EF0000-memory.dmpFilesize
7.7MB
-
memory/900-3-0x000000007474E000-0x000000007474F000-memory.dmpFilesize
4KB
-
memory/900-4-0x0000000074740000-0x0000000074EF0000-memory.dmpFilesize
7.7MB