Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 03:49

General

  • Target

    $0/SaferWeb-installer.exe

  • Size

    478KB

  • MD5

    cd788cd014faf68e4880fcacc87d584e

  • SHA1

    88939cf32a2c4550046304c36a830e89f8d53ae2

  • SHA256

    c27bc42aaccb99060646cdac71f4afc363eba40197f53222e7c27613c289cf92

  • SHA512

    57de1f077f5a3b6c12308c35c63c44b701a9239b2d22dc3a8a1f5b2392feb3082757523c5f0ae1942b3a3ff5064e3707524eaef15b68772f7c6003c613906a01

  • SSDEEP

    6144:9DdjrKos4c625/x25KYaW19+N5P9eIpeWijnUcI:9Ddjr1hcd9/YaW19+N5P9eIcUcI

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$0\SaferWeb-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\$0\SaferWeb-installer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4804-1-0x00007FFFAC0F3000-0x00007FFFAC0F5000-memory.dmp

    Filesize

    8KB

  • memory/4804-0-0x0000022174040000-0x00000221740BA000-memory.dmp

    Filesize

    488KB

  • memory/4804-2-0x00000221744D0000-0x0000022174510000-memory.dmp

    Filesize

    256KB

  • memory/4804-3-0x0000022174510000-0x0000022174540000-memory.dmp

    Filesize

    192KB

  • memory/4804-4-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-5-0x0000022175EF0000-0x0000022175F2A000-memory.dmp

    Filesize

    232KB

  • memory/4804-6-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-7-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-8-0x0000022177E10000-0x0000022177E3A000-memory.dmp

    Filesize

    168KB

  • memory/4804-9-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-10-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-11-0x0000022178880000-0x0000022178888000-memory.dmp

    Filesize

    32KB

  • memory/4804-12-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-14-0x0000022179C40000-0x0000022179C4E000-memory.dmp

    Filesize

    56KB

  • memory/4804-13-0x0000022179DC0000-0x0000022179DF8000-memory.dmp

    Filesize

    224KB

  • memory/4804-15-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-16-0x00007FFFAC0F3000-0x00007FFFAC0F5000-memory.dmp

    Filesize

    8KB

  • memory/4804-17-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-18-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-19-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB

  • memory/4804-20-0x00007FFFAC0F0000-0x00007FFFACBB1000-memory.dmp

    Filesize

    10.8MB