Analysis
-
max time kernel
17s -
max time network
150s -
platform
windows10_x64 -
resource
win10v200722 -
submitted
18-10-2020 23:03
Behavioral task
behavioral1
Sample
HUw4K4m5.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
HUw4K4m5.exe
Resource
win10v200722
windows10_x64
0 signatures
0 seconds
General
-
Target
HUw4K4m5.exe
-
Size
45KB
-
MD5
799f88728c4848daa783bde79e4ac248
-
SHA1
ed4c07cb0bf245cc3e82cabe18a3d3f553a6e9b4
-
SHA256
913033893ab065b61e551399c91cdd877c134dc7dadacacbc87c3dfd798653a1
-
SHA512
5d92d95058681daaa52bd763073481943ed404e27545c55fe93217173ead7382ce7dfb05781152bcefeb5fca2ca7219ce3af841ef8ea93edba2be89012d73cab
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
HUw4K4m5.exedescription pid process Token: SeDebugPrivilege 3992 HUw4K4m5.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3992-0-0x0000000073530000-0x0000000073C1E000-memory.dmpFilesize
6.9MB
-
memory/3992-1-0x0000000000910000-0x0000000000911000-memory.dmpFilesize
4KB
-
memory/3992-3-0x0000000005960000-0x0000000005961000-memory.dmpFilesize
4KB
-
memory/3992-4-0x0000000005F00000-0x0000000005F01000-memory.dmpFilesize
4KB
-
memory/3992-5-0x0000000005A00000-0x0000000005A01000-memory.dmpFilesize
4KB