Analysis

  • max time kernel
    105s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-11-2024 00:36

General

  • Target

    0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe

  • Size

    1.3MB

  • MD5

    f9ece6d7e5065b5fb47776e4959ccc06

  • SHA1

    4d3719aa8cb2152fb9bb93c040c10922482e6df7

  • SHA256

    0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb

  • SHA512

    f9c983a40fa3ce26b4daced321cd8a793b686aca26b20311b2d5d19e4592b5e807c6495d1c2a1e115c4923e2c179140352f18ca2d8f6ebdd45aa5b0b3f474b25

  • SSDEEP

    24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszaDw4B/Os/IsSAN0z3ZU:GezaTF8FcNkNdfE0pZ9ozttwIRakGNrj

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe
    "C:\Users\Admin\AppData\Local\Temp\0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4340-0-0x00000204D6C70000-0x00000204D6C80000-memory.dmp

    Filesize

    64KB