Analysis

  • max time kernel
    150s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-02-2025 14:55

General

  • Target

    552d44f1bc9fed749568de044e6a2697908c35fe7700ad4525c2ff8e9c3341e9.exe

  • Size

    1.6MB

  • MD5

    b6adc539b81a5de934898b1316e3e7fc

  • SHA1

    09e0ec6346e2bd94ea4ec1c993122fe043c55863

  • SHA256

    552d44f1bc9fed749568de044e6a2697908c35fe7700ad4525c2ff8e9c3341e9

  • SHA512

    4272f3f6ddd72d1e2ef737440026af40da3d7d0db46c94044753e6e29023a8ade5645cf830d617316fde738a85d48ad9c6f3e485c526e65b9f7fea24fd6e15fa

  • SSDEEP

    24576:IQPCWEVJ1M8zBn9bSAF8Kf7KF0zsRRAuYS4rGODNqsPRyvOguaIFy/q19ZDSVXT3:pEdIazMYS4rjDNjPg2jSiAXT5XVPH1Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\552d44f1bc9fed749568de044e6a2697908c35fe7700ad4525c2ff8e9c3341e9.exe
    "C:\Users\Admin\AppData\Local\Temp\552d44f1bc9fed749568de044e6a2697908c35fe7700ad4525c2ff8e9c3341e9.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/448-0-0x00007FF92A123000-0x00007FF92A125000-memory.dmp

    Filesize

    8KB

  • memory/448-3-0x000002B29D830000-0x000002B29D864000-memory.dmp

    Filesize

    208KB

  • memory/448-6-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-7-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-8-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-9-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-10-0x000002B2BB7D0000-0x000002B2BB7D8000-memory.dmp

    Filesize

    32KB

  • memory/448-11-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-12-0x000002B2BB850000-0x000002B2BB888000-memory.dmp

    Filesize

    224KB

  • memory/448-13-0x000002B2BB820000-0x000002B2BB82E000-memory.dmp

    Filesize

    56KB

  • memory/448-28-0x00007FF92A123000-0x00007FF92A125000-memory.dmp

    Filesize

    8KB

  • memory/448-29-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-30-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-31-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-32-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB

  • memory/448-33-0x00007FF92A120000-0x00007FF92ABE1000-memory.dmp

    Filesize

    10.8MB