Analysis

  • max time kernel
    115s
  • max time network
    121s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 22:55

General

  • Target

    Dox_Tool_V2.exe

  • Size

    180KB

  • MD5

    b0424efaadfbf9991e55b397076c8181

  • SHA1

    bcf68986d9f98bf5d76a7eba580eb09be05e6243

  • SHA256

    dfdb90a7d5e41b030bb8bae6f325688ff3d3b3b2da8c554c34e66dad86cebe90

  • SHA512

    54e4cb638c71dd987951619ffb2e1d4f98fab7d75af4c1d39fed30162aece639961863b3caf1ade34f840a02233cf9431d9eb30e76d5a470383392c2fad0bfcd

  • SSDEEP

    3072:xUGBNLnlvzfNaITtRynmO/KT9C0tuXo+5yHOKlb1tKBMyoH9EJd:xUGeITtRkmO/KT9C0IXo+5yHDlXKqyoC

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dox_Tool_V2.exe
    "C:\Users\Admin\AppData\Local\Temp\Dox_Tool_V2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4272
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4352,i,16856304285138459032,14480077487839828721,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
    1⤵
      PID:912

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4272-0-0x000000007539E000-0x000000007539F000-memory.dmp

      Filesize

      4KB

    • memory/4272-1-0x0000000000150000-0x0000000000182000-memory.dmp

      Filesize

      200KB

    • memory/4272-2-0x0000000004BA0000-0x0000000004C3C000-memory.dmp

      Filesize

      624KB

    • memory/4272-3-0x00000000051F0000-0x0000000005794000-memory.dmp

      Filesize

      5.6MB

    • memory/4272-4-0x0000000004C40000-0x0000000004CD2000-memory.dmp

      Filesize

      584KB

    • memory/4272-5-0x0000000004B60000-0x0000000004B6A000-memory.dmp

      Filesize

      40KB

    • memory/4272-6-0x0000000004D40000-0x0000000004D96000-memory.dmp

      Filesize

      344KB

    • memory/4272-7-0x0000000075390000-0x0000000075B40000-memory.dmp

      Filesize

      7.7MB

    • memory/4272-8-0x0000000075390000-0x0000000075B40000-memory.dmp

      Filesize

      7.7MB

    • memory/4272-9-0x000000007539E000-0x000000007539F000-memory.dmp

      Filesize

      4KB

    • memory/4272-10-0x0000000075390000-0x0000000075B40000-memory.dmp

      Filesize

      7.7MB