6cfae9fac2b59c2520f8911a66bd16899886170ff2a5f17f40161ac47f66b0ff | Triage

Analysis

max time kernel
124s
max time network
146s
platform
windows10_x64
resource
win10v200430
submitted
30-06-2020 08:51

Sharing

Report Analysis Logs

General

Target

b0ee0f69d0044d4d4e1ba6fbe7a556ee.exe
Size

483KB
MD5

b0ee0f69d0044d4d4e1ba6fbe7a556ee
SHA1

562ae410121bf87420074a70023c40bbb9e7bcc3
SHA256

6cfae9fac2b59c2520f8911a66bd16899886170ff2a5f17f40161ac47f66b0ff
SHA512

6f984f428421adb3e48b18c8a6f1f76f0a11a06ce3c58355820fae85b3c346870f797137494125f121d5f25d8ef91f1182ab42a269ddadedc05255510a054644

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

b0ee0f69d0044d4d4e1ba6fbe7a556ee.exe

description pid process

Token: SeDebugPrivilege 3848 b0ee0f69d0044d4d4e1ba6fbe7a556ee.exe

C:\Users\Admin\AppData\Local\Temp\b0ee0f69d0044d4d4e1ba6fbe7a556ee.exe
"C:\Users\Admin\AppData\Local\Temp\b0ee0f69d0044d4d4e1ba6fbe7a556ee.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...