f0f5321fa169d31ce7a2d55b537b598d6ae6e8a9390acfdcea955b0c13a7b732 | Triage

Analysis

max time kernel
1s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
03-08-2024 01:31

Sharing

Report Analysis Logs

General

Target

offset.exe
Size

1.9MB
MD5

d67168f943e3c3361290d59d97510828
SHA1

c73a74f91d7e7f0921634f08c239933f7a7b589c
SHA256

f0f5321fa169d31ce7a2d55b537b598d6ae6e8a9390acfdcea955b0c13a7b732
SHA512

6a0f0a2c46eb0f815c31368df8b33fce09e303caf9dff87ed14a118720af21d5558ce7562587bc01e002020a3b45811c4933d5d2e356fc655ee565b5106c9509
SSDEEP

24576:dnUKv+m/uMlr5h4zXsozrkLzomhZB8PiNHky7xMvTwjOosH:doIuMxXEpyomhZB8PiNHky7xSTv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2796	offset.exe
2796	offset.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2796	offset.exe

C:\Users\Admin\AppData\Local\Temp\offset.exe
"C:\Users\Admin\AppData\Local\Temp\offset.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads