Resubmissions

25-12-2024 03:42

241225-d9c21axjdn 10

25-12-2024 03:39

241225-d74ryawqfw 10

25-12-2024 03:37

241225-d6fzgswqbw 10

25-12-2024 03:21

241225-dwt4cswpdj 10

Analysis

  • max time kernel
    92s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2024 03:21

General

  • Target

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe

  • Size

    261KB

  • MD5

    4de76198ea4488eae192d0ca4e4bd66b

  • SHA1

    5ac5585b13ea356969b168b86df12053a6de4ee2

  • SHA256

    150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302

  • SHA512

    db6c2ebbd9d01ebf8af3e68ef8e938c7b6da2c0eef5fc22f63fe69665c56ec19c2d241558984e03afb116b98a4e7dc2b0f4aa8dadd90f44caf3f72ae5f2ee52f

  • SSDEEP

    6144:+yNu/ItUREJ/KKNbS8wf7wmphBgl3gMT6nRx1ASqm:+WlJC6Csm5gRTD

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe
    "C:\Users\Admin\AppData\Local\Temp\150e8ef3f1b0d5b5b2af2ffc8d540cb0e36ecdcaf5001bab2f318e36a3c25302.exe"
    1⤵
    • Drops startup file
    • Suspicious use of AdjustPrivilegeToken
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2764-0-0x00007FFAEEE05000-0x00007FFAEEE06000-memory.dmp

    Filesize

    4KB

  • memory/2764-1-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-2-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-3-0x000000001DD30000-0x000000001E1FE000-memory.dmp

    Filesize

    4.8MB

  • memory/2764-4-0x000000001C0C0000-0x000000001C15C000-memory.dmp

    Filesize

    624KB

  • memory/2764-5-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-6-0x000000001C250000-0x000000001C2F6000-memory.dmp

    Filesize

    664KB

  • memory/2764-7-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-8-0x000000001C080000-0x000000001C088000-memory.dmp

    Filesize

    32KB

  • memory/2764-9-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-10-0x000000001C050000-0x000000001C06A000-memory.dmp

    Filesize

    104KB

  • memory/2764-12-0x00007FFAEEE05000-0x00007FFAEEE06000-memory.dmp

    Filesize

    4KB

  • memory/2764-13-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB

  • memory/2764-15-0x000000001EF70000-0x000000001EFD2000-memory.dmp

    Filesize

    392KB

  • memory/2764-17-0x00007FFAEEB50000-0x00007FFAEF4F1000-memory.dmp

    Filesize

    9.6MB