Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-02-2025 04:44

General

  • Target

    45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe

  • Size

    1.6MB

  • MD5

    12098871db5c2237e2fb4c347c86758f

  • SHA1

    1698b4d20c4bb0e1bd0acff2e4982ab71c8cd31a

  • SHA256

    45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2

  • SHA512

    925e9bc37e491699987f82b2719ff52114bdb889c2cf2aba0da1a6eae16f1eed4735c1e538d84ea8a08cd963fb9311bf5f15a902df28e7e4d80785dd3a794a43

  • SSDEEP

    24576:VeOCnoITBKtKUFIb99eESRh0ME23JMKOuTlqLoA6D6IVPx7JDSVXT5XOt4eSyaa:Vmy0V2ZMKOY31PxKXT5Xug1a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe
    "C:\Users\Admin\AppData\Local\Temp\45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1100-0-0x00007FFE55193000-0x00007FFE55195000-memory.dmp

    Filesize

    8KB

  • memory/1100-1-0x0000023AE2AA0000-0x0000023AE2AD4000-memory.dmp

    Filesize

    208KB

  • memory/1100-2-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-3-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-4-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-5-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-6-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-7-0x0000023AFE800000-0x0000023AFE808000-memory.dmp

    Filesize

    32KB

  • memory/1100-9-0x0000023AFE810000-0x0000023AFE81E000-memory.dmp

    Filesize

    56KB

  • memory/1100-8-0x0000023AFEE60000-0x0000023AFEE98000-memory.dmp

    Filesize

    224KB

  • memory/1100-22-0x00007FFE55193000-0x00007FFE55195000-memory.dmp

    Filesize

    8KB

  • memory/1100-23-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-24-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-25-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB

  • memory/1100-26-0x00007FFE55190000-0x00007FFE55C51000-memory.dmp

    Filesize

    10.8MB