Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    19-11-2020 13:47

General

  • Target

    90x6a0Rn.exe

  • Size

    17KB

  • MD5

    a0c06d543bc43b3e2a0ba1c2b86940d6

  • SHA1

    4532f1161d60b4d535fcc8adba58e4c2c281aafa

  • SHA256

    f64a444e9610d54dd7250532d19176619979701372723c00e828f8a4f9dc878f

  • SHA512

    57b5aa42a6c67cde260c2edc2b3b187edbfa154e81962943f050392d3513ea453b564c40f5e689e095b489c1b9638115afb07efa93a6bb116c9a3e01bdcea2d7

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90x6a0Rn.exe
    "C:\Users\Admin\AppData\Local\Temp\90x6a0Rn.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/336-0-0x000007FEF6340000-0x000007FEF6CDD000-memory.dmp
    Filesize

    9.6MB

  • memory/336-1-0x000007FEF6340000-0x000007FEF6CDD000-memory.dmp
    Filesize

    9.6MB