a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48

General

Target

a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
Size

2.0MB
MD5

42c6446a1ff60a442e589f84497b527e
SHA1

d50b8ec96328fdb349ed4d487cb1210241be81b5
SHA256

a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48
SHA512

7fd4127bdbb818cda9b53de3d8b6240655b851d2a9b18e24bc7870058670212dc6887ee657a652e573f2bfa72b4d6af68e4b289a8cb80dcbfbad77d7d53bd2b2
SSDEEP

49152:AVImnP3ObryxvZcaS39o1XsWO4iaXT5XeM1:A8OOaS32D5r1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe

pid	process
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe

description	pid	process
Token: SeDebugPrivilege	1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
Token: SeDebugPrivilege	1992	a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe

C:\Users\Admin\AppData\Local\Temp\a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe
"C:\Users\Admin\AppData\Local\Temp\a3dee10cade4122a09b8104530fc95cf0ef106a830f97dbe4ed27c5258911c48.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-0-0x00007FF918303000-0x00007FF918305000-memory.dmp

Filesize
8KB

Download
memory/1992-1-0x000001C8D1560000-0x000001C8D1594000-memory.dmp

Filesize
208KB

Download
memory/1992-2-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-3-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-4-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-5-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-7-0x000001C8D1C40000-0x000001C8D1C48000-memory.dmp

Filesize
32KB

Download
memory/1992-6-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-8-0x000001C8EF540000-0x000001C8EF578000-memory.dmp

Filesize
224KB

Download
memory/1992-9-0x000001C8EF500000-0x000001C8EF50E000-memory.dmp

Filesize
56KB

Download
memory/1992-22-0x00007FF918303000-0x00007FF918305000-memory.dmp

Filesize
8KB

Download
memory/1992-23-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-24-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download
memory/1992-25-0x00007FF918300000-0x00007FF918DC1000-memory.dmp

Filesize
10.8MB

Download

Analysis

Sharing