Analysis

  • max time kernel
    141s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-07-2024 17:41

General

  • Target

    keygen.exe

  • Size

    112KB

  • MD5

    554c4945c5d449d13569f6fb3d9ce88f

  • SHA1

    80d6da1c7d91eafab7465105ba64fef14a84380f

  • SHA256

    60ac5348f68f84e6363510674bf0b7d2a70d0633af6b7800250de27523563612

  • SHA512

    7a190e22da3d226fdbbec6673483df8b70856d0a8b0b2af414f419c7e8a80522d40e3160853d4258bc20a9682085fe78d8cd48178fc6f287844b1f799d721340

  • SSDEEP

    3072:7Xjm52GBxF3wU8mM8nygsTTh8J+8Yh0gXp2KLYxlA1y:7XagGBxjbhMTh8uh0cC3

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\keygen.exe
    "C:\Users\Admin\AppData\Local\Temp\keygen.exe"
    1⤵
      PID:3168
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x514 0x244
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1508

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3168-0-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-1-0x0000000000600000-0x0000000000602000-memory.dmp

      Filesize

      8KB

    • memory/3168-2-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-3-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-4-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-5-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-6-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-7-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-8-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-9-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-10-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-11-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-12-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-13-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-14-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB

    • memory/3168-15-0x0000000000400000-0x000000000049B000-memory.dmp

      Filesize

      620KB