Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-02-2025 03:55

General

  • Target

    76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe

  • Size

    1.6MB

  • MD5

    13a8ddc94b397479cb02e28425cb0d9d

  • SHA1

    1a2385a5d96cd462e0c8ec3e62512a0c5a75e3da

  • SHA256

    76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719

  • SHA512

    5a5f9ceac7bbeaf84990f6eeeb745e02256afc3ca7c72fb87505576fa8c80845f2c005cda50ed363024012e0629d109e016d010f8b485e52c3ca89ab7e176df7

  • SSDEEP

    24576:r0yOdKnqj9MNrOoThmBZTsl3WaPECkDtGQjnEd7DSVXT5X1hnN:gSqj9MxOt83J/kwonPXT5X1hN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe
    "C:\Users\Admin\AppData\Local\Temp\76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4752-0-0x00007FFF24363000-0x00007FFF24365000-memory.dmp

    Filesize

    8KB

  • memory/4752-1-0x0000017F6EE30000-0x0000017F6EE64000-memory.dmp

    Filesize

    208KB

  • memory/4752-2-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-3-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-4-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-5-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-6-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-7-0x0000017F6FA90000-0x0000017F6FA98000-memory.dmp

    Filesize

    32KB

  • memory/4752-9-0x0000017F6FAE0000-0x0000017F6FAEE000-memory.dmp

    Filesize

    56KB

  • memory/4752-8-0x0000017F75230000-0x0000017F75268000-memory.dmp

    Filesize

    224KB

  • memory/4752-22-0x00007FFF24363000-0x00007FFF24365000-memory.dmp

    Filesize

    8KB

  • memory/4752-23-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-24-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB

  • memory/4752-25-0x00007FFF24360000-0x00007FFF24E21000-memory.dmp

    Filesize

    10.8MB