Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-11-2024 19:39

General

  • Target

    SAM X222C#.exe

  • Size

    3.7MB

  • MD5

    ad991add5af431b8d808cf9035a5cd46

  • SHA1

    d7ac382fa834529219db1b76e4d928ff24f1245b

  • SHA256

    a1dfdf32f2a82156bb3007896a9672fa05aba8ce4c668c3f4dce449a1a811a19

  • SHA512

    b876e8380ab97dade3f875a7e0cee2dc598ba55143921bdd1f1d9d2d5be55c25d62b12aaef424227e1450f6ddf67a4e04e3f4fc846182abb842c4c821997cbbd

  • SSDEEP

    98304:laMw+woaBHtFIT4bNJFY3Oqtbh+KH4kpc+DX/0Hd:S+nAbjBHYcKYOD8

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SAM X222C#.exe
    "C:\Users\Admin\AppData\Local\Temp\SAM X222C#.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:4588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4588-0-0x00007FFDDEB83000-0x00007FFDDEB85000-memory.dmp

    Filesize

    8KB

  • memory/4588-1-0x000002D718530000-0x000002D7188F4000-memory.dmp

    Filesize

    3.8MB

  • memory/4588-2-0x000002D718CF0000-0x000002D718D02000-memory.dmp

    Filesize

    72KB

  • memory/4588-3-0x000002D732F70000-0x000002D733184000-memory.dmp

    Filesize

    2.1MB

  • memory/4588-4-0x00007FFDDEB80000-0x00007FFDDF641000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-5-0x000002D735F60000-0x000002D735F9C000-memory.dmp

    Filesize

    240KB

  • memory/4588-6-0x00007FFDDEB80000-0x00007FFDDF641000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-7-0x00007FFDDEB83000-0x00007FFDDEB85000-memory.dmp

    Filesize

    8KB

  • memory/4588-8-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-9-0x00007FFDDEB80000-0x00007FFDDF641000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-10-0x00007FFDDEB80000-0x00007FFDDF641000-memory.dmp

    Filesize

    10.8MB

  • memory/4588-11-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-12-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-13-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-14-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-15-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-16-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-17-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-18-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-19-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-20-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-21-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-22-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB

  • memory/4588-23-0x000002D733280000-0x000002D733429000-memory.dmp

    Filesize

    1.7MB