Analysis

  • max time kernel
    430s
  • max time network
    443s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2024, 12:26

General

  • Target

    CSGOChecker.exe

  • Size

    6.7MB

  • MD5

    96b72e630d22ab2abb41e180c5e40a96

  • SHA1

    68bc75409e663a5f72bd252567a5b1ac6a070f71

  • SHA256

    528214feff8c5fe6eae4ab60337adf43cffa1eec073f36d5f476e0a8ae357f7c

  • SHA512

    6c91c65fc0023bdf3c33cdda4f35a1e656d962307904fb1b0ca85bd4956dcf057d9350260df35177068f7f790f8f466debe9b514235831a95991aadf4712157b

  • SSDEEP

    98304:oOnU6kZ5lE8edjzoa7gfXmnMz/fgT+GgZDscTJ5pfrv4w0Nc+wJ1:oOU6kZ50z7g1zApgZwcF5pzv4wlH

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CSGOChecker.exe
    "C:\Users\Admin\AppData\Local\Temp\CSGOChecker.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4968-0-0x00007FFAA68C3000-0x00007FFAA68C5000-memory.dmp

          Filesize

          8KB

        • memory/4968-1-0x0000012EB4960000-0x0000012EB500A000-memory.dmp

          Filesize

          6.7MB

        • memory/4968-2-0x00007FFAA68C0000-0x00007FFAA7381000-memory.dmp

          Filesize

          10.8MB

        • memory/4968-3-0x0000012ED1DA0000-0x0000012ED1DAA000-memory.dmp

          Filesize

          40KB

        • memory/4968-4-0x00007FFAA68C0000-0x00007FFAA7381000-memory.dmp

          Filesize

          10.8MB

        • memory/4968-6-0x0000012ED26D0000-0x0000012ED26E2000-memory.dmp

          Filesize

          72KB

        • memory/4968-37-0x00007FFAA68C0000-0x00007FFAA7381000-memory.dmp

          Filesize

          10.8MB

        • memory/4968-38-0x00007FFAA68C3000-0x00007FFAA68C5000-memory.dmp

          Filesize

          8KB

        • memory/4968-39-0x00007FFAA68C0000-0x00007FFAA7381000-memory.dmp

          Filesize

          10.8MB

        • memory/4968-40-0x00007FFAA68C0000-0x00007FFAA7381000-memory.dmp

          Filesize

          10.8MB