Resubmissions

15-11-2024 18:05

241115-wpjcdsxrdy 10

11-11-2024 21:40

241111-1h6xbsxcql 10

03-12-2022 17:54

221203-wg4ncscc33 10

Analysis

  • max time kernel
    1800s
  • max time network
    1804s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    15-11-2024 18:05

General

  • Target

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe

  • Size

    8KB

  • MD5

    fd1489c65b0d75f4cdc7b1f2634b5359

  • SHA1

    f8431629d627f8dc13ca486e8b5d0a46f47d46fd

  • SHA256

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea

  • SHA512

    e4fc02e1567e188caaf67ccd3a068e6b9db1c20b22a6949ec9ffd9d1a037afe36d744ac8c94a0fd5df55c7e2a51c10a9bcf05c3274175c8296cf16be718a99a2

  • SSDEEP

    96:a9hcOxiPwrltSJ1+pa/4/pzzkZj6tfCIQJ25FsfQungwffm2gbFnU:avc4rvpPd4Z+t6BJyungwffPZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe
    "C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3168-0-0x00007FF937883000-0x00007FF937885000-memory.dmp

    Filesize

    8KB

  • memory/3168-1-0x0000000000B00000-0x0000000000B06000-memory.dmp

    Filesize

    24KB

  • memory/3168-2-0x00007FF937880000-0x00007FF938342000-memory.dmp

    Filesize

    10.8MB

  • memory/3168-3-0x00007FF937883000-0x00007FF937885000-memory.dmp

    Filesize

    8KB

  • memory/3168-4-0x000000001E140000-0x000000001E23F000-memory.dmp

    Filesize

    1020KB

  • memory/3168-5-0x00007FF937880000-0x00007FF938342000-memory.dmp

    Filesize

    10.8MB