Analysis

  • max time kernel
    20s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    06-01-2021 07:16

General

  • Target

    Asytine.exe

  • Size

    47KB

  • MD5

    418447513075f7f69b34146e65a37dda

  • SHA1

    a4880253a6422c1818868dc0d35d08fac07cec58

  • SHA256

    8202b076b1213ee08d7217b3700545e8ddaaad7c6440f66ec9607cc020a41be5

  • SHA512

    acd7a5df8dbd79d235a13a9c48d0e73c0d8abbabf7a2748abc71a868ab223ae9e60c8207ef6cf650de9295d1e89b3b4a7dc60d3257d0fc253a8af97ceb285f47

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Asytine.exe
    "C:\Users\Admin\AppData\Local\Temp\Asytine.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1584-2-0x000007FEF5E00000-0x000007FEF67EC000-memory.dmp
    Filesize

    9.9MB

  • memory/1584-3-0x0000000000170000-0x0000000000171000-memory.dmp
    Filesize

    4KB