Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-11-2024 15:23

General

  • Target

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe

  • Size

    8KB

  • MD5

    fd1489c65b0d75f4cdc7b1f2634b5359

  • SHA1

    f8431629d627f8dc13ca486e8b5d0a46f47d46fd

  • SHA256

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea

  • SHA512

    e4fc02e1567e188caaf67ccd3a068e6b9db1c20b22a6949ec9ffd9d1a037afe36d744ac8c94a0fd5df55c7e2a51c10a9bcf05c3274175c8296cf16be718a99a2

  • SSDEEP

    96:a9hcOxiPwrltSJ1+pa/4/pzzkZj6tfCIQJ25FsfQungwffm2gbFnU:avc4rvpPd4Z+t6BJyungwffPZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe
    "C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3008-0-0x00007FFD36103000-0x00007FFD36105000-memory.dmp

    Filesize

    8KB

  • memory/3008-1-0x00000000003E0000-0x00000000003E6000-memory.dmp

    Filesize

    24KB

  • memory/3008-2-0x00007FFD36100000-0x00007FFD36BC1000-memory.dmp

    Filesize

    10.8MB

  • memory/3008-3-0x00007FFD36103000-0x00007FFD36105000-memory.dmp

    Filesize

    8KB

  • memory/3008-4-0x00007FFD36100000-0x00007FFD36BC1000-memory.dmp

    Filesize

    10.8MB