Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    02-12-2020 06:19

General

  • Target

    Sr3MVtvi.exe

  • Size

    102KB

  • MD5

    8d0b9671869babdabee581aa2ee3797b

  • SHA1

    452e87e8ac6e3df677aae637087368a6da799dc6

  • SHA256

    c4fcb26e8e459c5009a8a465a6e471cf696b1fe4c660c5f83728dc9032f65d6c

  • SHA512

    6a72e3f19863a80b94d928044be8d565f1a4b323d898c3d72900e5b4d128e55de7936a3601cca0b6910f9acb69572a1d7756344d7c0c194d4b6cdaaa87be66d8

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sr3MVtvi.exe
    "C:\Users\Admin\AppData\Local\Temp\Sr3MVtvi.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/972-2-0x00007FFA6B350000-0x00007FFA6BCF0000-memory.dmp
    Filesize

    9.6MB