Analysis

  • max time kernel
    93s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240708-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240708-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-07-2024 17:43

General

  • Target

    SecuriteInfo.com.Adware.Proxy.4.14874.24893.exe

  • Size

    79KB

  • MD5

    4728caaf305b82f36d580237402d2e95

  • SHA1

    bab7024104900fe713cbc652769a861f701abca9

  • SHA256

    e58b3288caeece808737bcdebcf22103fb46db3b07bbf65a60123c2eb99adfcb

  • SHA512

    ebc45e19ff51f1cc4b5389cc3be6c759656a125a57de37289820bba34a7cde667c1a3a0adf550ed71027d0fb40ca64fb15f2526213f1f22f0dde91698d1082b0

  • SSDEEP

    768:udtvBx0X4ZWZI2OCZftorrGmLJqkaS82AD3xxcoysSoQuSn:YP3CHevJES8tT3co1L7S

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Adware.Proxy.4.14874.24893.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Adware.Proxy.4.14874.24893.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2644-0-0x00007FFCB2B63000-0x00007FFCB2B65000-memory.dmp

    Filesize

    8KB

  • memory/2644-1-0x000001B35E080000-0x000001B35E096000-memory.dmp

    Filesize

    88KB

  • memory/2644-2-0x00007FFCB2B60000-0x00007FFCB3621000-memory.dmp

    Filesize

    10.8MB

  • memory/2644-4-0x00007FFCB2B60000-0x00007FFCB3621000-memory.dmp

    Filesize

    10.8MB