Analysis

  • max time kernel
    150s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-02-2025 11:55

General

  • Target

    498355c9f8c5c5a86558e1cd64eb36204b1d0453e20ba495bc362222f13cec14.exe

  • Size

    1.3MB

  • MD5

    b56d98e5da2f4ac045fb9c7d726291f2

  • SHA1

    1fbb2dadf7988df2468f1cdb9e8bb504d8354163

  • SHA256

    498355c9f8c5c5a86558e1cd64eb36204b1d0453e20ba495bc362222f13cec14

  • SHA512

    6e70d952223577993733b4ae7d62152f58a8ceba15520510bb05d2385641f3315b11b5be6a59cba58c9c1e9e8461c7dc71737ac5fcdb91ecd14d6eb512677774

  • SSDEEP

    24576:DXv4+mGEGpiFuRRgZY/V1S4Do1Z1nbJ7bDS5w+:k+6GpH3gu/m4ENnV7iw+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\498355c9f8c5c5a86558e1cd64eb36204b1d0453e20ba495bc362222f13cec14.exe
    "C:\Users\Admin\AppData\Local\Temp\498355c9f8c5c5a86558e1cd64eb36204b1d0453e20ba495bc362222f13cec14.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3552-0-0x00007FFEB8613000-0x00007FFEB8615000-memory.dmp

    Filesize

    8KB

  • memory/3552-1-0x000001FDB4770000-0x000001FDB47A2000-memory.dmp

    Filesize

    200KB

  • memory/3552-2-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-3-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-6-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-7-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-9-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-16-0x00007FFEB8613000-0x00007FFEB8615000-memory.dmp

    Filesize

    8KB

  • memory/3552-17-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-18-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-19-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-20-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB

  • memory/3552-21-0x00007FFEB8610000-0x00007FFEB90D1000-memory.dmp

    Filesize

    10.8MB