Analysis
-
max time kernel
15s -
max time network
118s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
04-01-2021 02:13
General
-
Target
fb812a3c965da5044860794686ce9656db3c37be16794ab7c771c32567514fed.exe
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb812a3c965da5044860794686ce9656db3c37be16794ab7c771c32567514fed.exe"C:\Users\Admin\AppData\Local\Temp\fb812a3c965da5044860794686ce9656db3c37be16794ab7c771c32567514fed.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2432-2-0x0000000073970000-0x000000007405E000-memory.dmpFilesize
6.9MB
-
memory/2432-3-0x0000000000FC0000-0x0000000000FC1000-memory.dmpFilesize
4KB
-
memory/2432-5-0x00000000060E0000-0x00000000060E1000-memory.dmpFilesize
4KB
-
memory/2432-6-0x00000000058C0000-0x00000000058C1000-memory.dmpFilesize
4KB
-
memory/2432-7-0x0000000005B10000-0x0000000005B11000-memory.dmpFilesize
4KB
-
memory/2432-8-0x0000000006020000-0x000000000603C000-memory.dmpFilesize
112KB