Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-09-2024 12:38

General

  • Target

    DaysGonev1.0v1.04Plus35Trainer.exe

  • Size

    1.3MB

  • MD5

    d06b29acf88fdcc2f5dd049b2311967b

  • SHA1

    b9910bccd7546409a270f7299d9f1287311d6215

  • SHA256

    81830016defdd03ae9756b258ef6fd458bdf657bb4a3aa35d1a00268e2ec19e7

  • SHA512

    e50a2060e642fb7c823e53758a4ade6a96ea7f44ac8e17757c433b7a9a4dfe39ab39aade1e12773f9b13fb45d30eae0e5bffabb555987dd2c2757178b7788910

  • SSDEEP

    24576:95G91srHmUv5pSTKoGB9pKYW3LGPdXR1r33tVDSDfsbJ7:DHmiTSGoapg36lhtdlV7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DaysGonev1.0v1.04Plus35Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\DaysGonev1.0v1.04Plus35Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3132-0-0x00007FFA851C3000-0x00007FFA851C5000-memory.dmp

    Filesize

    8KB

  • memory/3132-1-0x0000013E6B960000-0x0000013E6B99E000-memory.dmp

    Filesize

    248KB

  • memory/3132-2-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-5-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-6-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-8-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-17-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-19-0x00007FFA851C3000-0x00007FFA851C5000-memory.dmp

    Filesize

    8KB

  • memory/3132-20-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-21-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-22-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-23-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB

  • memory/3132-24-0x00007FFA851C0000-0x00007FFA85C81000-memory.dmp

    Filesize

    10.8MB