Analysis
- max time kernel
118s - max time network
131s - platform
windows7_x64 - resource
win7v20201028 - submitted
08/04/2021, 06:28
General
- Target Youtube_4k_Downloader.exe
- Size 21.4MB
- Sample210408-a481l2dk9s
- SHA256 c40529ad4cd03e64f1c62065d003f19d2903c77654ebe5823ea0a474f884f1d4
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Youtube_4k_Downloader.exe"C:\Users\Admin\AppData\Local\Temp\Youtube_4k_Downloader.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1152-2-0x0000000074360000-0x0000000074A4E000-memory.dmp
memory/1152-3-0x00000000013C0000-0x00000000013C1000-memory.dmp
memory/1152-5-0x00000000006B0000-0x00000000006D3000-memory.dmp
memory/1152-6-0x0000000007500000-0x0000000007AF2000-memory.dmp
memory/1152-7-0x0000000005E50000-0x0000000005E51000-memory.dmp
memory/1152-8-0x0000000000890000-0x0000000000893000-memory.dmp
memory/1152-9-0x00000000008D0000-0x00000000008E9000-memory.dmp
memory/1152-10-0x00000000008F0000-0x00000000008F5000-memory.dmp
memory/1152-11-0x0000000000910000-0x0000000000913000-memory.dmp
memory/1152-12-0x00000000009A0000-0x00000000009AB000-memory.dmp
memory/1152-13-0x00000000082A0000-0x0000000008345000-memory.dmp
memory/1152-14-0x0000000005E56000-0x0000000005E67000-memory.dmp
memory/1152-15-0x0000000005E51000-0x0000000005E52000-memory.dmp
memory/1152-16-0x0000000001390000-0x0000000001391000-memory.dmp