Analysis
- max time kernel
150s - max time network
91s - platform
windows7_x64 - resource
win7v20201028 - submitted
01/04/2021, 13:01
General
- Target dd33f19f8304c9b080ece59f76be2340.exe
- Size 419KB
- Sample210401-8bbkfjxwpj
- SHA256 0f1153b16dce8a116e175a92d04d463ecc113b79cf1a5991462a320924e0e2df
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd33f19f8304c9b080ece59f76be2340.exe"C:\Users\Admin\AppData\Local\Temp\dd33f19f8304c9b080ece59f76be2340.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/528-2-0x0000000001A60000-0x0000000001A71000-memory.dmp
memory/528-3-0x0000000003110000-0x0000000003121000-memory.dmp
memory/528-5-0x0000000000230000-0x000000000026A000-memory.dmp
memory/528-6-0x0000000000400000-0x000000000043D000-memory.dmp
memory/528-4-0x0000000074D40000-0x000000007542E000-memory.dmp
memory/528-7-0x00000000032E0000-0x0000000003315000-memory.dmp
memory/528-9-0x0000000005B52000-0x0000000005B53000-memory.dmp
memory/528-8-0x0000000005B51000-0x0000000005B52000-memory.dmp
memory/528-10-0x0000000005B53000-0x0000000005B54000-memory.dmp
memory/528-11-0x0000000003430000-0x0000000003464000-memory.dmp
memory/528-12-0x0000000005B54000-0x0000000005B56000-memory.dmp