Analysis

  • max time kernel
    149s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-10-2024 16:53

General

  • Target

    Kidd.exe

  • Size

    2.6MB

  • MD5

    0c1445834ed4f5a70b5e509012bcb693

  • SHA1

    917dca222a871b27845768caa725bf67dbd04ef7

  • SHA256

    c7ac902058cdc9dc40e5219ee2e4aa0530d176e7d7f0b034c1131636e4383131

  • SHA512

    b39a6387670ffcb3cfbe7eed0b52defbd8d2b8660492a73685f5492b815dc50e57c5e56efdd5aceac50ff0e87e13d603e4bb6c526660f2f2b633210cc5fe66ce

  • SSDEEP

    49152:+oBdC7r6Kxbt+6epx1FZtNNntJnRJ7lzT8oo6FxPiOPZp3Rtz:RBA6x1jDhvnzlroI1bBt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 50 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kidd.exe
    "C:\Users\Admin\AppData\Local\Temp\Kidd.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2428-0-0x00007FFDB53F3000-0x00007FFDB53F5000-memory.dmp

    Filesize

    8KB

  • memory/2428-1-0x000002A01AA10000-0x000002A01ACA8000-memory.dmp

    Filesize

    2.6MB

  • memory/2428-2-0x000002A01CA80000-0x000002A01CAC2000-memory.dmp

    Filesize

    264KB

  • memory/2428-3-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-4-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-5-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-6-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-7-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-8-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-9-0x00007FFDB53F3000-0x00007FFDB53F5000-memory.dmp

    Filesize

    8KB

  • memory/2428-10-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-11-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-12-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB

  • memory/2428-13-0x00007FFDB53F0000-0x00007FFDB5EB1000-memory.dmp

    Filesize

    10.8MB