Resubmissions

25-12-2024 03:42

241225-d9c21axjdn 10

25-12-2024 03:39

241225-d74ryawqfw 10

25-12-2024 03:37

241225-d6fzgswqbw 10

25-12-2024 03:21

241225-dwt4cswpdj 10

Analysis

  • max time kernel
    93s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2024 03:39

General

  • Target

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe

  • Size

    261KB

  • MD5

    4de76198ea4488eae192d0ca4e4bd66b

  • SHA1

    5ac5585b13ea356969b168b86df12053a6de4ee2

  • SHA256

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302

  • SHA512

    db6c2ebbd9d01ebf8af3e68ef8e938c7b6da2c0eef5fc22f63fe69665c56ec19c2d241558984e03afb116b98a4e7dc2b0f4aa8dadd90f44caf3f72ae5f2ee52f

  • SSDEEP

    6144:+yNu/ItUREJ/KKNbS8wf7wmphBgl3gMT6nRx1ASqm:+WlJC6Csm5gRTD

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe
    "C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe"
    1⤵
    • Drops startup file
    • Suspicious use of AdjustPrivilegeToken
    PID:336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/336-0-0x00007FFA04015000-0x00007FFA04016000-memory.dmp

    Filesize

    4KB

  • memory/336-1-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-2-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-3-0x000000001DA20000-0x000000001DEEE000-memory.dmp

    Filesize

    4.8MB

  • memory/336-4-0x000000001BD20000-0x000000001BDBC000-memory.dmp

    Filesize

    624KB

  • memory/336-5-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-6-0x000000001BF40000-0x000000001BFE6000-memory.dmp

    Filesize

    664KB

  • memory/336-7-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-8-0x000000001BE20000-0x000000001BE28000-memory.dmp

    Filesize

    32KB

  • memory/336-9-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-10-0x000000001BDF0000-0x000000001BE0A000-memory.dmp

    Filesize

    104KB

  • memory/336-12-0x00007FFA04015000-0x00007FFA04016000-memory.dmp

    Filesize

    4KB

  • memory/336-13-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB

  • memory/336-15-0x000000001ECB0000-0x000000001ED12000-memory.dmp

    Filesize

    392KB

  • memory/336-17-0x00007FFA03D60000-0x00007FFA04701000-memory.dmp

    Filesize

    9.6MB