Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-01-2025 16:56

General

  • Target

    c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe

  • Size

    1.2MB

  • MD5

    df84c2dcc44fe1921cbd786b92eebad2

  • SHA1

    394b05dd67cdb65d8874abb1b9818fc008e8260f

  • SHA256

    c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da

  • SHA512

    4c205af89a031d738e1247e787e208fce2c068d8ebb7a83da3b5657cdb3ed2ed9a2c2fced22781ea8fcfd93d32d3726122a07db68c62542aeff43c99e2dff992

  • SSDEEP

    24576:osIV0SK7h5Yy4rxUMhWpOlZAb6utlJVdeeWIguOL+4nDS2bJ7l:oR0V49USWz6ZfjL+4lV7l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe
    "C:\Users\Admin\AppData\Local\Temp\c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2836-0-0x00007FFAF29E3000-0x00007FFAF29E5000-memory.dmp

    Filesize

    8KB

  • memory/2836-1-0x00000267DE9C0000-0x00000267DEA08000-memory.dmp

    Filesize

    288KB

  • memory/2836-2-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-3-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-6-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-7-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-18-0x00007FFAF29E3000-0x00007FFAF29E5000-memory.dmp

    Filesize

    8KB

  • memory/2836-19-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-20-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-21-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-22-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB

  • memory/2836-23-0x00007FFAF29E0000-0x00007FFAF34A1000-memory.dmp

    Filesize

    10.8MB