Analysis
- max time kernel
118s - max time network
120s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
- submitted
04/10/2024, 02:19
General
- Target ee5e15f0a5d97e1c50e1b74e2856852979d7018e559635d2dd2bf93504cd0817.exe
- Size 24.4MB
- Sample241004-csbbeayhrn
- SHA256 ee5e15f0a5d97e1c50e1b74e2856852979d7018e559635d2dd2bf93504cd0817
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee5e15f0a5d97e1c50e1b74e2856852979d7018e559635d2dd2bf93504cd0817.exe"C:\Users\Admin\AppData\Local\Temp\ee5e15f0a5d97e1c50e1b74e2856852979d7018e559635d2dd2bf93504cd0817.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2780-4-0x0000000077590000-0x0000000077592000-memory.dmp
memory/2780-2-0x0000000077590000-0x0000000077592000-memory.dmp
memory/2780-0-0x0000000077590000-0x0000000077592000-memory.dmp
memory/2780-5-0x00000001401BE000-0x0000000140FDC000-memory.dmp
memory/2780-7-0x0000000140000000-0x000000014285D000-memory.dmp
memory/2780-11-0x0000000140000000-0x000000014285D000-memory.dmp
memory/2780-12-0x0000000140000000-0x000000014285D000-memory.dmp
memory/2780-13-0x00000001401BE000-0x0000000140FDC000-memory.dmp