Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2024, 07:25

General

  • Target

    labymod4-installer.exe

  • Size

    4.5MB

  • MD5

    ff808f2bcef1b2d33eeee8678fa2c42d

  • SHA1

    c1f640a45ee396f4dc70bb50ead02b0899a66122

  • SHA256

    357d5e993e6ff9d91b2c49d4bc01a0aea465b737c0e8bc21b4cf21ff1a6824bb

  • SHA512

    dff690c735b63fcadb0f981f792eed77f7c5af58b0f11f03d365bf3b75da04fb2898d48ab6621e979f5a81aa27856ddedef0949ef2e9bc1dcc98daf98b536b87

  • SSDEEP

    98304:q2RqljXnSurf6OJRF1/o+tBOS32jXaq4LVTgIp+LD/CQKLSPq:qZdNVo+t72jXuZGCNSi

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\labymod4-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\labymod4-installer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2768-0-0x000000007465E000-0x000000007465F000-memory.dmp

    Filesize

    4KB

  • memory/2768-1-0x0000000000560000-0x00000000009E4000-memory.dmp

    Filesize

    4.5MB

  • memory/2768-2-0x0000000005990000-0x0000000005F34000-memory.dmp

    Filesize

    5.6MB

  • memory/2768-3-0x00000000053E0000-0x0000000005472000-memory.dmp

    Filesize

    584KB

  • memory/2768-4-0x0000000005480000-0x0000000005530000-memory.dmp

    Filesize

    704KB

  • memory/2768-5-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-6-0x0000000005590000-0x000000000559A000-memory.dmp

    Filesize

    40KB

  • memory/2768-7-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-8-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-9-0x000000007465E000-0x000000007465F000-memory.dmp

    Filesize

    4KB

  • memory/2768-10-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-11-0x000000000B9E0000-0x000000000C186000-memory.dmp

    Filesize

    7.6MB

  • memory/2768-12-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-13-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB

  • memory/2768-14-0x0000000074650000-0x0000000074E00000-memory.dmp

    Filesize

    7.7MB