Analysis

  • max time kernel
    137s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-11-2024 22:13

General

  • Target

    KiffApp2.exe

  • Size

    83KB

  • MD5

    1c844fbbddd5c48cd6ecbd41e6b3fba2

  • SHA1

    6cf1bf7f35426ef8429689a2914287818b3789f6

  • SHA256

    8f474d9f74192818abf096b2449564ff47f1ab86a14111179bbec73e2ffb6865

  • SHA512

    b4d12bd02029aab1eb9d609875df98b96391db86f3c0f0f4e82d6814949794668fd3aaba15439383e9a7bacaa3616454f2913222d018e195483507a7d675424a

  • SSDEEP

    1536:3clLTEsDOLIomkSv6I4eg+8O10vxkeMkgm:3clLTEsUmk0rgJO1SxHL

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\KiffApp2.exe
    "C:\Users\Admin\AppData\Local\Temp\KiffApp2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2948-0-0x00007FFA08123000-0x00007FFA08125000-memory.dmp

    Filesize

    8KB

  • memory/2948-1-0x0000000000260000-0x000000000027A000-memory.dmp

    Filesize

    104KB

  • memory/2948-2-0x00007FFA08120000-0x00007FFA08BE1000-memory.dmp

    Filesize

    10.8MB

  • memory/2948-3-0x00007FFA08120000-0x00007FFA08BE1000-memory.dmp

    Filesize

    10.8MB