Analysis

  • max time kernel
    150s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-02-2025 23:02

General

  • Target

    c14525cfd1fd9d6313dfdf7ea08f4b78b82586632ea725906b19d45a9e14f51d.exe

  • Size

    1.1MB

  • MD5

    fc05096e3c213f6c90362ece84f3bec1

  • SHA1

    3744bce45f85b7029902a274600854e793f22cbb

  • SHA256

    c14525cfd1fd9d6313dfdf7ea08f4b78b82586632ea725906b19d45a9e14f51d

  • SHA512

    5a1eb39513adcccce83219c2a7ea6bbbfeb7d2ab7565cbf67f74c2c9c806f0d6ab5767bfa0d8a6cc89d62118af75d92324e8e5b1a64c723aa3c98a04414647f4

  • SSDEEP

    24576:w2UlQci3khFwLhaOUYo8N3ZbXBFO5ZDSiTbJ7I:WGfaw1aOU/orFO5tV7I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c14525cfd1fd9d6313dfdf7ea08f4b78b82586632ea725906b19d45a9e14f51d.exe
    "C:\Users\Admin\AppData\Local\Temp\c14525cfd1fd9d6313dfdf7ea08f4b78b82586632ea725906b19d45a9e14f51d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4216-3-0x00000241B3880000-0x00000241B38B2000-memory.dmp

    Filesize

    200KB

  • memory/4216-0-0x00007FF8E9BB3000-0x00007FF8E9BB5000-memory.dmp

    Filesize

    8KB

  • memory/4216-6-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-7-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-8-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-9-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-10-0x00000241CDBF0000-0x00000241CDBF8000-memory.dmp

    Filesize

    32KB

  • memory/4216-11-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-13-0x00000241CDC40000-0x00000241CDC4E000-memory.dmp

    Filesize

    56KB

  • memory/4216-12-0x00000241CDC70000-0x00000241CDCA8000-memory.dmp

    Filesize

    224KB

  • memory/4216-26-0x00007FF8E9BB3000-0x00007FF8E9BB5000-memory.dmp

    Filesize

    8KB

  • memory/4216-27-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-28-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-29-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-30-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB

  • memory/4216-31-0x00007FF8E9BB0000-0x00007FF8EA671000-memory.dmp

    Filesize

    10.8MB