24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c | Triage

Analysis

max time kernel
1128s
max time network
841s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
18-06-2024 07:24

Sharing

Report Analysis Logs

General

Target

Challenge_2.exe
Size

3.6MB
MD5

db349b97c37d22f5ea1d1841e3c89eb4
SHA1

e889544aff85ffaf8b0d0da705105dee7c97fe26
SHA256

24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
SHA512

d6c60b8f22f89cbd1262c0aa7ae240577a82002fb149e9127d4edf775a25abcda4e585b6113e79ab4a24bb65f4280532529c2f06f7ffe4d5db45c0caf74fea38
SSDEEP

98304:wDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3R:wDqPe1Cxcxk3ZAEUadzR8yc4gB

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes:

AUDIODG.EXE

description	pid	process
Token: 33	1876	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1876	AUDIODG.EXE
Token: 33	1876	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1876	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\Challenge_2.exe
"C:\Users\Admin\AppData\Local\Temp\Challenge_2.exe"
1⤵
PID:2648

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2232

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x1ac
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads