Analysis

  • max time kernel
    129s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 08:14

General

  • Target

    c3f1df1e4d545b7c7e308cf9224a99afcd06aab00c27772cc38c832aa25df790.exe

  • Size

    3.6MB

  • MD5

    b3b489417a4313efad8b400cf92b8adf

  • SHA1

    3b37fdf025651690d9f675b8daa9e8997ba6fce8

  • SHA256

    c3f1df1e4d545b7c7e308cf9224a99afcd06aab00c27772cc38c832aa25df790

  • SHA512

    0d9bfd9c2ad2af6da800a35d6fe31f382c90dbc94ba5a89701ecf4ac7d8c2eb9d8360e129a82f9d71be65bba2843ec3ed9df20c19fd939a348af9a39599d6a38

  • SSDEEP

    49152:yVpyVfvURPaN3Saa7gH56hSp2POUK42VDj:yVpyVHURPaN3SaaUZ6hSwFK4yj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c3f1df1e4d545b7c7e308cf9224a99afcd06aab00c27772cc38c832aa25df790.exe
    "C:\Users\Admin\AppData\Local\Temp\c3f1df1e4d545b7c7e308cf9224a99afcd06aab00c27772cc38c832aa25df790.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3408-0-0x00007FFA03793000-0x00007FFA03795000-memory.dmp

    Filesize

    8KB

  • memory/3408-1-0x000002339CDE0000-0x000002339D17A000-memory.dmp

    Filesize

    3.6MB

  • memory/3408-2-0x00007FFA03790000-0x00007FFA04251000-memory.dmp

    Filesize

    10.8MB

  • memory/3408-3-0x00007FFA03790000-0x00007FFA04251000-memory.dmp

    Filesize

    10.8MB