Analysis

  • max time kernel
    150s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-01-2025 21:46

General

  • Target

    926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe

  • Size

    1.7MB

  • MD5

    cbab378af34f97a7dfac7fc5f609e83c

  • SHA1

    4a4835ead0b6f18cd9c91a56d1fe82893410e95f

  • SHA256

    926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1

  • SHA512

    55929d01a578d5b676cd841c0b5619b8c403af012cdb0778550663240479bef0eaa26c793eeba0042109fb08a957cb52767fc90aa41c9967ec45349cda6e3882

  • SSDEEP

    24576:u2QpUGbjXOnUxvF6FxoP0E8/7jKeRZMZPjyN4DSVXT5Xf5qqyaP:u2EbYUx96FxNEA7jL4WN9XT5XRv1P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe
    "C:\Users\Admin\AppData\Local\Temp\926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2068-1-0x00000259B6550000-0x00000259B6584000-memory.dmp

    Filesize

    208KB

  • memory/2068-0-0x00007FFB69683000-0x00007FFB69685000-memory.dmp

    Filesize

    8KB

  • memory/2068-2-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-3-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-4-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-5-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-6-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-7-0x00000259D4890000-0x00000259D4898000-memory.dmp

    Filesize

    32KB

  • memory/2068-9-0x00000259D48E0000-0x00000259D48EE000-memory.dmp

    Filesize

    56KB

  • memory/2068-8-0x00000259D4910000-0x00000259D4948000-memory.dmp

    Filesize

    224KB

  • memory/2068-24-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-25-0x00007FFB69683000-0x00007FFB69685000-memory.dmp

    Filesize

    8KB

  • memory/2068-26-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-27-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB

  • memory/2068-28-0x00007FFB69680000-0x00007FFB6A141000-memory.dmp

    Filesize

    10.8MB