Analysis

  • max time kernel
    94s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 16:50

General

  • Target

    DumpChrome(1).exe

  • Size

    7KB

  • MD5

    19c16c8666917e24e9f5a9b3786d26b6

  • SHA1

    59c26cd4749bcf5927b2335cd56e49ab9548598f

  • SHA256

    8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce

  • SHA512

    3599fc4d1675b6d5e43a2fb8462d0ac59f49ed8c1e9cc81bd58a84f89767595c1ade5e2a008adab8c1bdc74f5db0f561fd68896262d129fe92b384fed01b0276

  • SSDEEP

    96:WEoMQhJKs7EnCxs3VGNX3KHFCi4eiZWG+dJvw43R/YMwfYlwrzNt:WNTQIgh23KHWb+dJvdmMwf+wt

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DumpChrome(1).exe
    "C:\Users\Admin\AppData\Local\Temp\DumpChrome(1).exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4116-1-0x00007FFED0593000-0x00007FFED0595000-memory.dmp

    Filesize

    8KB

  • memory/4116-0-0x000002C0B7940000-0x000002C0B7946000-memory.dmp

    Filesize

    24KB

  • memory/4116-2-0x00007FFED0590000-0x00007FFED1051000-memory.dmp

    Filesize

    10.8MB

  • memory/4116-3-0x00007FFED0590000-0x00007FFED1051000-memory.dmp

    Filesize

    10.8MB