Analysis
- max time kernel
150s - max time network
92s - platform
windows7_x64 - resource
win7v20201028 - submitted
31/03/2021, 17:52
General
- Target b9df54c71a347e648c0e024e2b4d9d74.exe
- Size 321KB
- Sample210331-jz2dpb494a
- SHA256 a037c92bc75769e88e0d233c66624d579fda2f356b963caca083d89d8e331d40
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9df54c71a347e648c0e024e2b4d9d74.exe"C:\Users\Admin\AppData\Local\Temp\b9df54c71a347e648c0e024e2b4d9d74.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1968-2-0x00000000044D0000-0x00000000044E1000-memory.dmp
memory/1968-3-0x00000000046D0000-0x00000000046E1000-memory.dmp
memory/1968-4-0x0000000074180000-0x000000007486E000-memory.dmp
memory/1968-5-0x0000000006E80000-0x0000000006EB5000-memory.dmp
memory/1968-6-0x0000000006EC0000-0x0000000006EF4000-memory.dmp
memory/1968-11-0x0000000007063000-0x0000000007064000-memory.dmp
memory/1968-10-0x0000000007062000-0x0000000007063000-memory.dmp
memory/1968-9-0x0000000007061000-0x0000000007062000-memory.dmp
memory/1968-8-0x0000000000400000-0x000000000043D000-memory.dmp
memory/1968-7-0x0000000000230000-0x000000000026A000-memory.dmp
memory/1968-12-0x0000000007064000-0x0000000007066000-memory.dmp