Analysis

  • max time kernel
    93s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-07-2024 22:48

General

  • Target

    1272258bd740154664e6e753a9a1a260.exe

  • Size

    1.8MB

  • MD5

    1272258bd740154664e6e753a9a1a260

  • SHA1

    072b1a9d461556044f1e4cdba80026af5d49e0ad

  • SHA256

    3a781096664640f8be5857fa2aac73b494a072fa4ef9eb1432f409c621267f80

  • SHA512

    a352934212e85da786d157dec31890bb5302b7e638202c7b5e004155209118c98d016c4b374d8150ca28de4b5256ed972c24cbaa34a03e57c02c47bb9b383258

  • SSDEEP

    24576:2NailHiLHgZpJEmzr8EzERVY7zpCGSbvdfvDJO5:qnHiLHkJEmzr8+ER49CGSjJd

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1272258bd740154664e6e753a9a1a260.exe
    "C:\Users\Admin\AppData\Local\Temp\1272258bd740154664e6e753a9a1a260.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1116-0-0x0000000030000000-0x00000000301D5000-memory.dmp

    Filesize

    1.8MB

  • memory/1116-1-0x0000000002190000-0x00000000021F6000-memory.dmp

    Filesize

    408KB

  • memory/1116-8-0x0000000002190000-0x00000000021F6000-memory.dmp

    Filesize

    408KB

  • memory/1116-12-0x0000000030000000-0x00000000301D5000-memory.dmp

    Filesize

    1.8MB