Analysis

  • max time kernel
    97s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/08/2024, 01:20

General

  • Target

    3e85a8a29fb89fce3fc4fda0fad1158a7d001d39378b361d6226221483cf7387.exe

  • Size

    685KB

  • MD5

    a31c1068dd46375790e713635c76aa35

  • SHA1

    cf8b211261897325d695961e527bb277858115ca

  • SHA256

    3e85a8a29fb89fce3fc4fda0fad1158a7d001d39378b361d6226221483cf7387

  • SHA512

    ce4796363711758a1d1dde62d47f22667e15501bb4cbb8ddf3205f8a37726cef138cc579fb892d669770f234d41742e75f9a746c888e0903c774b075c29437c3

  • SSDEEP

    12288:ynGMLZX6O/HjU5LgyS65bvmhvRuU/r74GaSD4ef884DUtsZzaulM:qp6O/DU2oaRB4GaSxm4tKlM

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e85a8a29fb89fce3fc4fda0fad1158a7d001d39378b361d6226221483cf7387.exe
    "C:\Users\Admin\AppData\Local\Temp\3e85a8a29fb89fce3fc4fda0fad1158a7d001d39378b361d6226221483cf7387.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3144-0-0x00007FFFE4CD3000-0x00007FFFE4CD5000-memory.dmp

    Filesize

    8KB

  • memory/3144-1-0x000002CDE9010000-0x000002CDE9030000-memory.dmp

    Filesize

    128KB

  • memory/3144-2-0x00007FFFE4CD0000-0x00007FFFE5791000-memory.dmp

    Filesize

    10.8MB

  • memory/3144-3-0x000002CDEC140000-0x000002CDEC1D4000-memory.dmp

    Filesize

    592KB

  • memory/3144-4-0x00007FFFE4CD0000-0x00007FFFE5791000-memory.dmp

    Filesize

    10.8MB

  • memory/3144-5-0x00007FFFE4CD3000-0x00007FFFE4CD5000-memory.dmp

    Filesize

    8KB

  • memory/3144-6-0x00007FFFE4CD0000-0x00007FFFE5791000-memory.dmp

    Filesize

    10.8MB