Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/07/2024, 02:04

General

  • Target
    cc4b5d5653d7dafb9cda51793a15ee5d987b82d3e62e97b3915e5032e7ae4f8e.exe
  • Size 208KB
  • Sample240702-chb5yswcmj
  • SHA256 cc4b5d5653d7dafb9cda51793a15ee5d987b82d3e62e97b3915e5032e7ae4f8e
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc4b5d5653d7dafb9cda51793a15ee5d987b82d3e62e97b3915e5032e7ae4f8e.exe
    "C:\Users\Admin\AppData\Local\Temp\cc4b5d5653d7dafb9cda51793a15ee5d987b82d3e62e97b3915e5032e7ae4f8e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1644

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1644-0-0x00007FF980EF3000-0x00007FF980EF5000-memory.dmp

        memory/1644-1-0x000001E1EC3A0000-0x000001E1EC3D8000-memory.dmp

        memory/1644-2-0x00007FF980EF0000-0x00007FF9819B1000-memory.dmp

        memory/1644-3-0x00007FF980EF3000-0x00007FF980EF5000-memory.dmp

        memory/1644-4-0x00007FF980EF0000-0x00007FF9819B1000-memory.dmp