Analysis
- max time kernel
5s - max time network
18s - platform
windows7_x64 - resource
win7v200722 - submitted
20/10/2020, 09:07
General
- Target d94234f4134f4e3a783a8a048dc3e314.exe
- Size 964KB
- Sample201020-dfvg52tar2
- SHA256 cea96c40377f340af14e1b6e4e2caab923e3872febb310b95810ad88abf73921
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d94234f4134f4e3a783a8a048dc3e314.exe"C:\Users\Admin\AppData\Local\Temp\d94234f4134f4e3a783a8a048dc3e314.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/628-0-0x00000000748A0000-0x0000000074F8E000-memory.dmp
memory/628-1-0x0000000000BC0000-0x0000000000BC1000-memory.dmp
memory/628-3-0x0000000004C00000-0x0000000004C3E000-memory.dmp