Analysis
- max time kernel
14s - max time network
144s - platform
windows10_x64 - resource
win10v200722 - submitted
15/09/2020, 12:03
General
- Target QkmPLD37.exe
- Size 45KB
- Sample200915-xtj8j8hrnj
- SHA256 c7cb970a67b5c370741e139dda48d47433477ab400e51a62a99b7a379a6c0dbc
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QkmPLD37.exe"C:\Users\Admin\AppData\Local\Temp\QkmPLD37.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3816-0-0x0000000073980000-0x000000007406E000-memory.dmp
memory/3816-1-0x0000000000E90000-0x0000000000E91000-memory.dmp
memory/3816-3-0x0000000005FD0000-0x0000000005FD1000-memory.dmp
memory/3816-4-0x0000000006570000-0x0000000006571000-memory.dmp
memory/3816-5-0x00000000060E0000-0x00000000060E1000-memory.dmp