Analysis

  • max time kernel
    145s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-07-2024 17:45

General

  • Target

    SecuriteInfo.com.Adware.Proxy.4.14874.exe

  • Size

    79KB

  • MD5

    4728caaf305b82f36d580237402d2e95

  • SHA1

    bab7024104900fe713cbc652769a861f701abca9

  • SHA256

    e58b3288caeece808737bcdebcf22103fb46db3b07bbf65a60123c2eb99adfcb

  • SHA512

    ebc45e19ff51f1cc4b5389cc3be6c759656a125a57de37289820bba34a7cde667c1a3a0adf550ed71027d0fb40ca64fb15f2526213f1f22f0dde91698d1082b0

  • SSDEEP

    768:udtvBx0X4ZWZI2OCZftorrGmLJqkaS82AD3xxcoysSoQuSn:YP3CHevJES8tT3co1L7S

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Adware.Proxy.4.14874.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Adware.Proxy.4.14874.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4048-0-0x00007FF87E193000-0x00007FF87E195000-memory.dmp

    Filesize

    8KB

  • memory/4048-1-0x000001BD34F90000-0x000001BD34FA6000-memory.dmp

    Filesize

    88KB

  • memory/4048-2-0x00007FF87E190000-0x00007FF87EC51000-memory.dmp

    Filesize

    10.8MB

  • memory/4048-4-0x00007FF87E190000-0x00007FF87EC51000-memory.dmp

    Filesize

    10.8MB