Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
- submitted
02/06/2024, 11:09
General
- Target f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b.exe
- Size 3.5MB
- Sample240602-m9klhsbc5s
- SHA256 f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b.exe"C:\Users\Admin\AppData\Local\Temp\f63ac140ab4aabfdb9da63f45f22e696ba17186e09aafb14a9ef9137a48bfe4b.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1992-65-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-63-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-62-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-3-0x0000000005030000-0x000000000514A000-memory.dmp
memory/1992-4-0x0000000005520000-0x00000000055FE000-memory.dmp
memory/1992-5-0x0000000000860000-0x000000000087C000-memory.dmp
memory/1992-6-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-7-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-9-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-17-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-15-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-13-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-11-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-19-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-21-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-23-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-25-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-29-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-39-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-45-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-1-0x0000000000990000-0x0000000000D0E000-memory.dmp
memory/1992-0-0x000000007406E000-0x000000007406F000-memory.dmp
memory/1992-2-0x0000000074060000-0x000000007474E000-memory.dmp
memory/1992-59-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-57-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-55-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-53-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-51-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-66-0x0000000074060000-0x000000007474E000-memory.dmp
memory/1992-49-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-47-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-43-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-41-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-37-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-35-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-33-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-31-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-27-0x0000000000860000-0x0000000000875000-memory.dmp
memory/1992-79-0x0000000074060000-0x000000007474E000-memory.dmp
memory/2400-67-0x0000000000400000-0x0000000000456000-memory.dmp
memory/2400-78-0x0000000000401000-0x000000000043A000-memory.dmp
memory/2400-69-0x0000000000400000-0x0000000000456000-memory.dmp