Resubmissions
08/06/2024, 12:50
240608-p24erscf8408/06/2024, 12:42
240608-pxlddscf48308/06/2024, 12:30
240608-ppln7abf6x308/06/2024, 12:10
240608-pcgjpsbe4y308/06/2024, 10:05
240608-l4xs8abg25322/05/2024, 02:11
240522-cl9wdsha433Analysis
- max time kernel
69s - max time network
44s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
08/06/2024, 12:30
General
- Target 58a728da4e405ca979e73e774fe72fb9.exe
- Size 449KB
- Sample240608-ppln7abf6x
- SHA256 6f4571882606ee838590243876609effc6a78455fde3a908ed9f9220758c8eb9
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\58a728da4e405ca979e73e774fe72fb9.exe"C:\Users\Admin\AppData\Local\Temp\58a728da4e405ca979e73e774fe72fb9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1964-0-0x0000000000A10000-0x0000000000A86000-memory.dmp
memory/1964-1-0x00007FF805060000-0x00007FF80523B000-memory.dmp
memory/1964-2-0x00000000012F0000-0x0000000001312000-memory.dmp
memory/1964-3-0x00007FF805060000-0x00007FF80523B000-memory.dmp
memory/1964-4-0x0000000002CC0000-0x0000000002D36000-memory.dmp
memory/1964-5-0x00007FF805060000-0x00007FF80523B000-memory.dmp
memory/1964-6-0x00007FF805060000-0x00007FF80523B000-memory.dmp
memory/1964-7-0x00007FF805060000-0x00007FF80523B000-memory.dmp