Analysis

  • max time kernel
    141s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/03/2025, 06:12

General

  • Target

    6947cb60fed661aec1436b0ed5b443e13f6985da262967c2a9eb8160b1064e09.exe

  • Size

    43.0MB

  • MD5

    e8b16c47f0375087e417f1d46a98e519

  • SHA1

    bd24e03f712a9af8a27ca786e4825cf0eddff6b2

  • SHA256

    6947cb60fed661aec1436b0ed5b443e13f6985da262967c2a9eb8160b1064e09

  • SHA512

    d1a5db0dbea0b600a999407ec7e9b39478e82e93167115e82daa8ebed5a3d0ebe8026711809044e9eeeccde6ce6c28d56bfe80076100e4e20dbb62812fd7f21a

  • SSDEEP

    393216:qW3k54+W3biLa3L9NJ7W51AmOW1ZEk3Jp5LavV8I9dwt3Gg50mAJimWmHYRTIY1G:qWbH3biGRN1+qbwewbkvoVRpVCfN

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6947cb60fed661aec1436b0ed5b443e13f6985da262967c2a9eb8160b1064e09.exe
    "C:\Users\Admin\AppData\Local\Temp\6947cb60fed661aec1436b0ed5b443e13f6985da262967c2a9eb8160b1064e09.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:6084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/6084-0-0x00007FFB95523000-0x00007FFB95525000-memory.dmp

    Filesize

    8KB

  • memory/6084-1-0x0000018CD6AF0000-0x0000018CD95F4000-memory.dmp

    Filesize

    43.0MB

  • memory/6084-2-0x0000018CD99C0000-0x0000018CD99D2000-memory.dmp

    Filesize

    72KB

  • memory/6084-3-0x0000018CF3D80000-0x0000018CF3F9C000-memory.dmp

    Filesize

    2.1MB

  • memory/6084-4-0x00007FFB95520000-0x00007FFB95FE1000-memory.dmp

    Filesize

    10.8MB

  • memory/6084-5-0x0000018CF4250000-0x0000018CF428C000-memory.dmp

    Filesize

    240KB

  • memory/6084-6-0x00007FFB95520000-0x00007FFB95FE1000-memory.dmp

    Filesize

    10.8MB

  • memory/6084-8-0x00007FFB95523000-0x00007FFB95525000-memory.dmp

    Filesize

    8KB

  • memory/6084-7-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-9-0x00007FFB95520000-0x00007FFB95FE1000-memory.dmp

    Filesize

    10.8MB

  • memory/6084-10-0x00007FFB95520000-0x00007FFB95FE1000-memory.dmp

    Filesize

    10.8MB

  • memory/6084-11-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-12-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-13-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-14-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-15-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-16-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-17-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-18-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-19-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-20-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-21-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-22-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB

  • memory/6084-23-0x0000018CF3FA0000-0x0000018CF4149000-memory.dmp

    Filesize

    1.7MB