Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-08-2024 01:02

General

  • Target

    03d755b7c58e2521474d0685dd6b679f0061ecaa1bee9be23a51f41d7849e01a.exe

  • Size

    536KB

  • MD5

    0d4ec6367ed7fb27903b59b7d1ab989a

  • SHA1

    a6b9bd48b816e3dd040b356f3b332a597dbe31c6

  • SHA256

    03d755b7c58e2521474d0685dd6b679f0061ecaa1bee9be23a51f41d7849e01a

  • SHA512

    3782915c722fe25e0f092ad0a5b3da9c9ea9ebceee598254ed0e63ee6e9821c3aea222f935a5a7055a4fed2aaa17b5a936e050f460fbd6ee363f96d606f8d5a4

  • SSDEEP

    6144:38fPk98NW/SlSyw1nM00Z0ueNTrfdNnBRi:38093Q1EcCr7fi

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03d755b7c58e2521474d0685dd6b679f0061ecaa1bee9be23a51f41d7849e01a.exe
    "C:\Users\Admin\AppData\Local\Temp\03d755b7c58e2521474d0685dd6b679f0061ecaa1bee9be23a51f41d7849e01a.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5096-1-0x00007FFF4C3F3000-0x00007FFF4C3F5000-memory.dmp

    Filesize

    8KB

  • memory/5096-0-0x00000212330B0000-0x000002123313A000-memory.dmp

    Filesize

    552KB

  • memory/5096-2-0x00007FFF4C3F0000-0x00007FFF4CEB1000-memory.dmp

    Filesize

    10.8MB

  • memory/5096-3-0x00007FFF4C3F3000-0x00007FFF4C3F5000-memory.dmp

    Filesize

    8KB

  • memory/5096-4-0x00007FFF4C3F0000-0x00007FFF4CEB1000-memory.dmp

    Filesize

    10.8MB