Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-06-2024 03:34

General

  • Target

    e3d048508ff1a6c4e03cdeb42336717b69332bc9fe97fa6d8dafebd867f0dd27.exe

  • Size

    94KB

  • MD5

    1bf88e141be65d0a0b09798e144b53a7

  • SHA1

    231693e78661f8d72a969722a6c6de29e8a3d9d9

  • SHA256

    e3d048508ff1a6c4e03cdeb42336717b69332bc9fe97fa6d8dafebd867f0dd27

  • SHA512

    f656bc58d4543bb9c1373b374a7b57f837131e69b7b8fe06e570122551386c9f98261901dbd93ed82fa1fe29674f2c6e5da88585abf3239fa88441a75e76452a

  • SSDEEP

    768:aMSAiIMomA49YH1tz09wh1ZN/d/5MOBg6m9bgem5x85FZlc9+Huy+zXCRUR/lX8m:aFv0H1lHh1bd/5M+65nl8gh++4lXn

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3d048508ff1a6c4e03cdeb42336717b69332bc9fe97fa6d8dafebd867f0dd27.exe
    "C:\Users\Admin\AppData\Local\Temp\e3d048508ff1a6c4e03cdeb42336717b69332bc9fe97fa6d8dafebd867f0dd27.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1784-0-0x0000000001000000-0x000000000101B000-memory.dmp

    Filesize

    108KB

  • memory/1784-1-0x0000000001000000-0x000000000101B000-memory.dmp

    Filesize

    108KB