Analysis
-
max time kernel
93s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-01-2025 03:57
General
-
Target
9d06018f57d680e259aad12814c93f666142e34571e24ddca23984bfd3e6846d.exe
-
Size
1.7MB
-
MD5
96534a71f4866c5e10d16b0c076516a8
-
SHA1
fe38e4e9823284f050eefdbebe0ee1079652e3ef
-
SHA256
9d06018f57d680e259aad12814c93f666142e34571e24ddca23984bfd3e6846d
-
SHA512
ce4af86b11e60c256168cb04dc6d402cfbebff68211d3998aed974846a115a594cff938b3ca3d03591872d54a4723cad10489eec841526ed3d08d842d54a7992
-
SSDEEP
49152:Ptk3Py52UmGrNqbe+nHj0pHiEPKEk7mUW:Ptk3q2fO0rQH4d
Score
10/10
Malware Config
Signatures
-
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
-
Mimikatz family
-
mimikatz is an open source tool to dump credentials on Windows 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9d06018f57d680e259aad12814c93f666142e34571e24ddca23984bfd3e6846d.exe"C:\Users\Admin\AppData\Local\Temp\9d06018f57d680e259aad12814c93f666142e34571e24ddca23984bfd3e6846d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\cmd.execmd2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB