Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    16-10-2024 10:13

General

  • Target

    TaskManager.exe

  • Size

    77.2MB

  • MD5

    ae28763c9b4ce8141c0756db2b0df64d

  • SHA1

    b91dd2c3a0332a81332fcf91e5cd3e5e63f0defa

  • SHA256

    cacf758854ab3d5640649437be6b335a83ccd4c29fa6284984125c3f278c1d97

  • SHA512

    11ea54777be131a91ee868e964eb47397bc141b75fd2952d9243b673b9f3017d2f8c1b7088c0ee91f562a04da631b65c700a318663859c385b0eb9f4a4e9d063

  • SSDEEP

    393216:2G251FGAsxevIsx3PJ2KoB3wOvvQU6qdZY+IzGkZ1r3Pv8QshD6v0Iayz1qcKWgK:2D1Ftf3PowOnQU6zlTzEQshuh67kpD

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TaskManager.exe
    "C:\Users\Admin\AppData\Local\Temp\TaskManager.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2960-1-0x00000000034A0000-0x0000000004130000-memory.dmp

    Filesize

    12.6MB

  • memory/2960-65-0x0000000005AA0000-0x0000000005AC0000-memory.dmp

    Filesize

    128KB

  • memory/2960-69-0x000000013F736000-0x000000013F737000-memory.dmp

    Filesize

    4KB

  • memory/2960-61-0x00000000059A0000-0x0000000005A70000-memory.dmp

    Filesize

    832KB

  • memory/2960-57-0x00000000057B0000-0x00000000058C0000-memory.dmp

    Filesize

    1.1MB

  • memory/2960-53-0x0000000005680000-0x0000000005690000-memory.dmp

    Filesize

    64KB

  • memory/2960-49-0x00000000054F0000-0x0000000005660000-memory.dmp

    Filesize

    1.4MB

  • memory/2960-45-0x0000000005290000-0x0000000005320000-memory.dmp

    Filesize

    576KB

  • memory/2960-41-0x0000000004860000-0x0000000004890000-memory.dmp

    Filesize

    192KB

  • memory/2960-37-0x00000000047F0000-0x0000000004810000-memory.dmp

    Filesize

    128KB

  • memory/2960-33-0x00000000045C0000-0x0000000004610000-memory.dmp

    Filesize

    320KB

  • memory/2960-29-0x0000000004580000-0x00000000045C0000-memory.dmp

    Filesize

    256KB

  • memory/2960-25-0x0000000002630000-0x0000000002670000-memory.dmp

    Filesize

    256KB

  • memory/2960-21-0x00000000025D0000-0x00000000025E0000-memory.dmp

    Filesize

    64KB

  • memory/2960-17-0x00000000020A0000-0x00000000020C0000-memory.dmp

    Filesize

    128KB

  • memory/2960-13-0x0000000002040000-0x0000000002060000-memory.dmp

    Filesize

    128KB

  • memory/2960-9-0x0000000001FC0000-0x0000000001FF0000-memory.dmp

    Filesize

    192KB

  • memory/2960-5-0x0000000001F70000-0x0000000001F90000-memory.dmp

    Filesize

    128KB