Analysis

  • max time kernel
    145s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/06/2024, 03:39

General

  • Target

    ZenStudio.exe

  • Size

    19.6MB

  • MD5

    1fae469528fcc28ec48eb939b39f8a69

  • SHA1

    21f3642dbc8a5b7bd60cd285490f119aacdaa1a8

  • SHA256

    49e2e48406ae2b43df1e04c20c2fd13b9b25d7d16eb07bfe268f471ee755208c

  • SHA512

    16eb03db6c71770be6b142949f1eaee6ffd5839543d781b8870455cde089db643538c3ed12c2e03da43ec1e4a71ed0454343e23915a2ead9dcb0ff09432f17c1

  • SSDEEP

    393216:vM13RE6vuMqY6WIm9FzFfKTIX8g2JnniEMbvJBvoFzENUZM2Ez05Ts:vM13BmS7FYniEGRliNFE8s

Score
1/10

Malware Config

Signatures

  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 46 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ZenStudio.exe
    "C:\Users\Admin\AppData\Local\Temp\ZenStudio.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1412-0-0x000000007482E000-0x000000007482F000-memory.dmp

    Filesize

    4KB

  • memory/1412-1-0x0000000000EC0000-0x0000000002256000-memory.dmp

    Filesize

    19.6MB

  • memory/1412-2-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-3-0x000000000E360000-0x000000000F4F8000-memory.dmp

    Filesize

    17.6MB

  • memory/1412-4-0x00000000085A0000-0x00000000086B2000-memory.dmp

    Filesize

    1.1MB

  • memory/1412-5-0x0000000006F20000-0x0000000006F86000-memory.dmp

    Filesize

    408KB

  • memory/1412-6-0x0000000008EC0000-0x0000000008F16000-memory.dmp

    Filesize

    344KB

  • memory/1412-7-0x000000000A290000-0x000000000A2AC000-memory.dmp

    Filesize

    112KB

  • memory/1412-8-0x000000000A2B0000-0x000000000A2DA000-memory.dmp

    Filesize

    168KB

  • memory/1412-14-0x000000000FDA0000-0x000000000FDAE000-memory.dmp

    Filesize

    56KB

  • memory/1412-17-0x0000000010120000-0x0000000010152000-memory.dmp

    Filesize

    200KB

  • memory/1412-18-0x000000000FDC0000-0x000000000FDD0000-memory.dmp

    Filesize

    64KB

  • memory/1412-19-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-20-0x0000000007130000-0x0000000007138000-memory.dmp

    Filesize

    32KB

  • memory/1412-21-0x0000000007180000-0x00000000071B8000-memory.dmp

    Filesize

    224KB

  • memory/1412-22-0x0000000007160000-0x000000000716E000-memory.dmp

    Filesize

    56KB

  • memory/1412-23-0x0000000007770000-0x0000000007D14000-memory.dmp

    Filesize

    5.6MB

  • memory/1412-24-0x00000000072B0000-0x0000000007342000-memory.dmp

    Filesize

    584KB

  • memory/1412-25-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-26-0x0000000007350000-0x00000000076B0000-memory.dmp

    Filesize

    3.4MB

  • memory/1412-27-0x0000000007D20000-0x000000000801E000-memory.dmp

    Filesize

    3.0MB

  • memory/1412-28-0x0000000007730000-0x0000000007738000-memory.dmp

    Filesize

    32KB

  • memory/1412-29-0x0000000008020000-0x0000000008096000-memory.dmp

    Filesize

    472KB

  • memory/1412-30-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-31-0x000000000C9A0000-0x000000000C9A8000-memory.dmp

    Filesize

    32KB

  • memory/1412-32-0x000000007482E000-0x000000007482F000-memory.dmp

    Filesize

    4KB

  • memory/1412-33-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-34-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-35-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB

  • memory/1412-36-0x0000000074820000-0x0000000074FD0000-memory.dmp

    Filesize

    7.7MB