Analysis
- max time kernel
149s - max time network
149s - platform
windows7_x64 - resource
win7v20201028 - submitted
01/04/2021, 06:36
General
- Target a24ecaab4e0e9b568dd8738e590e57bb.exe
- Size 320KB
- Sample210401-5hl37tyde6
- SHA256 127094ebdef2ba4286949a781d2d756ddc8ae76b42e14b0ba49da4ba6d191444
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a24ecaab4e0e9b568dd8738e590e57bb.exe"C:\Users\Admin\AppData\Local\Temp\a24ecaab4e0e9b568dd8738e590e57bb.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1832-2-0x0000000004600000-0x0000000004611000-memory.dmp
memory/1832-3-0x00000000047F0000-0x0000000004801000-memory.dmp
memory/1832-4-0x0000000073980000-0x000000007406E000-memory.dmp
memory/1832-5-0x00000000047F0000-0x0000000004824000-memory.dmp
memory/1832-11-0x0000000004830000-0x0000000004862000-memory.dmp
memory/1832-12-0x0000000000230000-0x000000000026A000-memory.dmp
memory/1832-14-0x0000000006FF1000-0x0000000006FF2000-memory.dmp
memory/1832-13-0x0000000000400000-0x000000000043D000-memory.dmp
memory/1832-15-0x0000000006FF2000-0x0000000006FF3000-memory.dmp
memory/1832-16-0x0000000006FF3000-0x0000000006FF4000-memory.dmp
memory/1832-17-0x0000000006FF4000-0x0000000006FF6000-memory.dmp