Analysis

  • max time kernel
    9s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10/01/2025, 21:45

General

  • Target

    OneclickTools/OOshutup10/OOSU10.exe

  • Size

    1.9MB

  • MD5

    4803e06db91fdb8b6d1b65c0010d2f87

  • SHA1

    f6d68a7dcc9c46e663f586341e8ba8d1be6b0f9c

  • SHA256

    beb7becc38ccc7ed37c47fe607b25a966a5f71aabd36ab945c3cba15451dfa7b

  • SHA512

    f34195e4dd2b9a0dc4847e94547b3b4f0ee13009878f0e88954e6a070234b902814a7bdc018782cbaddb52e31e19f30bc2273d1b2ed1071f0695563e070c58c6

  • SSDEEP

    49152:zE6D5EyNuGVUJEJTJxJROfOrV3rukAanKZCWumEjlGLsmt8MR+zh:TykAWKZCfmMMR+l

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OneclickTools\OOshutup10\OOSU10.exe
    "C:\Users\Admin\AppData\Local\Temp\OneclickTools\OOshutup10\OOSU10.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3604-0-0x00007FFDA3DE3000-0x00007FFDA3DE5000-memory.dmp

    Filesize

    8KB

  • memory/3604-1-0x0000012468AE0000-0x0000012468CD0000-memory.dmp

    Filesize

    1.9MB

  • memory/3604-2-0x000001246B120000-0x000001246B14C000-memory.dmp

    Filesize

    176KB

  • memory/3604-3-0x000001246C110000-0x000001246C1B6000-memory.dmp

    Filesize

    664KB

  • memory/3604-4-0x000001246B150000-0x000001246B16A000-memory.dmp

    Filesize

    104KB

  • memory/3604-5-0x00007FFDA3DE0000-0x00007FFDA48A2000-memory.dmp

    Filesize

    10.8MB

  • memory/3604-6-0x000001246C270000-0x000001246C32A000-memory.dmp

    Filesize

    744KB

  • memory/3604-7-0x00007FFDA3DE0000-0x00007FFDA48A2000-memory.dmp

    Filesize

    10.8MB

  • memory/3604-8-0x000001246C240000-0x000001246C248000-memory.dmp

    Filesize

    32KB

  • memory/3604-10-0x000001246E5E0000-0x000001246E618000-memory.dmp

    Filesize

    224KB

  • memory/3604-12-0x00007FFDA3DE0000-0x00007FFDA48A2000-memory.dmp

    Filesize

    10.8MB

  • memory/3604-11-0x000001246DF90000-0x000001246DF9E000-memory.dmp

    Filesize

    56KB

  • memory/3604-15-0x00007FFDA3DE0000-0x00007FFDA48A2000-memory.dmp

    Filesize

    10.8MB

  • memory/3604-16-0x00007FFDA3DE3000-0x00007FFDA3DE5000-memory.dmp

    Filesize

    8KB

  • memory/3604-17-0x00007FFDA3DE0000-0x00007FFDA48A2000-memory.dmp

    Filesize

    10.8MB