Analysis

  • max time kernel
    55s
  • max time network
    42s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/10/2024, 16:16

General

  • Target

    Kidd.exe

  • Size

    2.6MB

  • MD5

    0c1445834ed4f5a70b5e509012bcb693

  • SHA1

    917dca222a871b27845768caa725bf67dbd04ef7

  • SHA256

    c7ac902058cdc9dc40e5219ee2e4aa0530d176e7d7f0b034c1131636e4383131

  • SHA512

    b39a6387670ffcb3cfbe7eed0b52defbd8d2b8660492a73685f5492b815dc50e57c5e56efdd5aceac50ff0e87e13d603e4bb6c526660f2f2b633210cc5fe66ce

  • SSDEEP

    49152:+oBdC7r6Kxbt+6epx1FZtNNntJnRJ7lzT8oo6FxPiOPZp3Rtz:RBA6x1jDhvnzlroI1bBt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kidd.exe
    "C:\Users\Admin\AppData\Local\Temp\Kidd.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4160-0-0x00007FFFA5C43000-0x00007FFFA5C45000-memory.dmp

    Filesize

    8KB

  • memory/4160-1-0x0000022C44780000-0x0000022C44A18000-memory.dmp

    Filesize

    2.6MB

  • memory/4160-2-0x0000022C46660000-0x0000022C466A2000-memory.dmp

    Filesize

    264KB

  • memory/4160-3-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-4-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-5-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-6-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-7-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-8-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-9-0x00007FFFA5C43000-0x00007FFFA5C45000-memory.dmp

    Filesize

    8KB

  • memory/4160-10-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-11-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-12-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-13-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB

  • memory/4160-14-0x00007FFFA5C40000-0x00007FFFA6701000-memory.dmp

    Filesize

    10.8MB