Resubmissions

25-12-2024 03:42

241225-d9c21axjdn 10

25-12-2024 03:39

241225-d74ryawqfw 10

25-12-2024 03:37

241225-d6fzgswqbw 10

25-12-2024 03:21

241225-dwt4cswpdj 10

Analysis

  • max time kernel
    96s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2024 03:37

General

  • Target

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe

  • Size

    261KB

  • MD5

    4de76198ea4488eae192d0ca4e4bd66b

  • SHA1

    5ac5585b13ea356969b168b86df12053a6de4ee2

  • SHA256

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302

  • SHA512

    db6c2ebbd9d01ebf8af3e68ef8e938c7b6da2c0eef5fc22f63fe69665c56ec19c2d241558984e03afb116b98a4e7dc2b0f4aa8dadd90f44caf3f72ae5f2ee52f

  • SSDEEP

    6144:+yNu/ItUREJ/KKNbS8wf7wmphBgl3gMT6nRx1ASqm:+WlJC6Csm5gRTD

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe
    "C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe"
    1⤵
    • Drops startup file
    • Suspicious use of AdjustPrivilegeToken
    PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/776-0-0x00007FFA71BE5000-0x00007FFA71BE6000-memory.dmp

    Filesize

    4KB

  • memory/776-1-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-2-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-3-0x000000001D320000-0x000000001D7EE000-memory.dmp

    Filesize

    4.8MB

  • memory/776-4-0x000000001B660000-0x000000001B6FC000-memory.dmp

    Filesize

    624KB

  • memory/776-5-0x000000001B840000-0x000000001B8E6000-memory.dmp

    Filesize

    664KB

  • memory/776-7-0x000000001B720000-0x000000001B728000-memory.dmp

    Filesize

    32KB

  • memory/776-8-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-6-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-9-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-10-0x000000001B930000-0x000000001B94A000-memory.dmp

    Filesize

    104KB

  • memory/776-12-0x00007FFA71BE5000-0x00007FFA71BE6000-memory.dmp

    Filesize

    4KB

  • memory/776-13-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB

  • memory/776-15-0x000000001E6D0000-0x000000001E732000-memory.dmp

    Filesize

    392KB

  • memory/776-17-0x00007FFA71930000-0x00007FFA722D1000-memory.dmp

    Filesize

    9.6MB