Analysis Overview
SHA256
1a4ea9f3df7b8c8efaf558ac23cff7681723daf9094515f613f66f1458c92819
Threat Level: Likely benign
The file DSD+2.395 FL.zip was found to be: Likely benign.
Malicious Activity Summary
Unsigned PE
Suspicious use of AdjustPrivilegeToken
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-06-03 12:42
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-03 12:42
Reported
2024-06-03 12:46
Platform
win11-20240508-en
Max time kernel
119s
Max time network
99s
Command Line
Signatures
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\DSD+2.395 FL\DSDPlus.exe
"C:\Users\Admin\AppData\Local\Temp\DSD+2.395 FL\DSDPlus.exe"
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004E4
Network
| Country | Destination | Domain | Proto |
| US | 52.111.229.43:443 | tcp |
Files
memory/2240-23-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-24-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-25-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-26-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-27-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-28-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-29-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-30-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-31-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-32-0x0000000000400000-0x000000000071D000-memory.dmp
memory/2240-33-0x0000000000400000-0x000000000071D000-memory.dmp