Analysis

  • max time kernel
    105s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-11-2024 00:32

General

  • Target

    8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe

  • Size

    1.6MB

  • MD5

    d1aa1291947a53247bc9d5abf88ecd32

  • SHA1

    26ef8aa3878792464fa74d9eef10bf60aee1be39

  • SHA256

    8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68

  • SHA512

    aad2d2063f7cf781a82eb3f6ab8a43b4a9416e7f89e58036b4b2466b7f08875fe8f7637363672d49f54a7093760dae22170e62d0d31cb56c4e0d957fe0ba2c46

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQDWT:GemTLkNdfE0pZyH

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe
    "C:\Users\Admin\AppData\Local\Temp\8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3504-0-0x000001D4B2740000-0x000001D4B2750000-memory.dmp

    Filesize

    64KB