Analysis

  • max time kernel
    51s
  • max time network
    58s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-06-2024 18:22

General

  • Target

    Setup.exe

  • Size

    12KB

  • MD5

    a14e63d27e1ac1df185fa062103aa9aa

  • SHA1

    2b64c35e4eff4a43ab6928979b6093b95f9fd714

  • SHA256

    dda39f19837168845de33959de34bcfb7ee7f3a29ae55c9fa7f4cb12cb27f453

  • SHA512

    10418efcce2970dcdbef1950464c4001753fccb436f4e8ba5f08f0d4d5c9b4a22a48f2803e59421b720393d84cfabd338497c0bc77cdd4548990930b9c350082

  • SSDEEP

    192:brl2reIazGejA7HhdSbw/z1ULU87glpK/b26J4S1Xu85:b52r+xjALhMWULU870gJJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/960-0-0x00007FF8F5A83000-0x00007FF8F5A85000-memory.dmp

    Filesize

    8KB

  • memory/960-1-0x000002BBFBCE0000-0x000002BBFBCEA000-memory.dmp

    Filesize

    40KB

  • memory/960-2-0x00007FF8F5A80000-0x00007FF8F6541000-memory.dmp

    Filesize

    10.8MB

  • memory/960-3-0x00007FF8F5A83000-0x00007FF8F5A85000-memory.dmp

    Filesize

    8KB

  • memory/960-5-0x00007FF8F5A80000-0x00007FF8F6541000-memory.dmp

    Filesize

    10.8MB