Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-01-2025 14:46

General

  • Target

    8e3feab0b03bf733ebf52f709bfdb322eac8ac772e5d90c7ed6d4ac49ec9f041.exe

  • Size

    2.0MB

  • MD5

    cf50bb5a748c05b5aa5fdf5e97b23fc5

  • SHA1

    fb4936e040c4a6a4183297150458c2e604b454af

  • SHA256

    8e3feab0b03bf733ebf52f709bfdb322eac8ac772e5d90c7ed6d4ac49ec9f041

  • SHA512

    bc3846fc261b8f001c1a6993b0b968134eb11ab34a61b2800d2d61029bede9c073ff689957a52783e1bb060464d589a137d5e7a494dd6ba4c26a97c0f1110fe9

  • SSDEEP

    49152:M/J2q9zdx2+S+iGcZE8Nb0XT5X+/ZiPEMz1N:TgLS++Nb0D5O/B41N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e3feab0b03bf733ebf52f709bfdb322eac8ac772e5d90c7ed6d4ac49ec9f041.exe
    "C:\Users\Admin\AppData\Local\Temp\8e3feab0b03bf733ebf52f709bfdb322eac8ac772e5d90c7ed6d4ac49ec9f041.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2004-0-0x00007FFD0BD53000-0x00007FFD0BD55000-memory.dmp

    Filesize

    8KB

  • memory/2004-1-0x0000017F53C50000-0x0000017F53C84000-memory.dmp

    Filesize

    208KB

  • memory/2004-2-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-3-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-4-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-5-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-6-0x0000017F6E260000-0x0000017F6E268000-memory.dmp

    Filesize

    32KB

  • memory/2004-8-0x0000017F6E2B0000-0x0000017F6E2BE000-memory.dmp

    Filesize

    56KB

  • memory/2004-7-0x0000017F6E2E0000-0x0000017F6E318000-memory.dmp

    Filesize

    224KB

  • memory/2004-21-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-22-0x00007FFD0BD53000-0x00007FFD0BD55000-memory.dmp

    Filesize

    8KB

  • memory/2004-23-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-24-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB

  • memory/2004-25-0x00007FFD0BD50000-0x00007FFD0C811000-memory.dmp

    Filesize

    10.8MB