Analysis
- max time kernel
49s - max time network
153s - platform
windows10_x64 - resource
win10v20201028 - submitted
08/04/2021, 06:28
General
- Target Youtube_4k_Downloader.exe
- Size 21.4MB
- Sample210408-a481l2dk9s
- SHA256 c40529ad4cd03e64f1c62065d003f19d2903c77654ebe5823ea0a474f884f1d4
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Youtube_4k_Downloader.exe"C:\Users\Admin\AppData\Local\Temp\Youtube_4k_Downloader.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3636-2-0x0000000073900000-0x0000000073FEE000-memory.dmp
memory/3636-3-0x0000000000E90000-0x0000000000E91000-memory.dmp
memory/3636-5-0x0000000006DA0000-0x0000000006DA1000-memory.dmp
memory/3636-6-0x0000000004680000-0x00000000046A3000-memory.dmp
memory/3636-7-0x00000000080A0000-0x0000000008692000-memory.dmp
memory/3636-8-0x0000000004570000-0x0000000004573000-memory.dmp
memory/3636-9-0x00000000045B0000-0x00000000045C9000-memory.dmp
memory/3636-10-0x00000000045D0000-0x00000000045D5000-memory.dmp
memory/3636-11-0x00000000045F0000-0x00000000045F3000-memory.dmp
memory/3636-12-0x0000000008F40000-0x0000000008F41000-memory.dmp
memory/3636-13-0x0000000008CD0000-0x0000000008CDB000-memory.dmp
memory/3636-14-0x0000000006DA4000-0x0000000006DA6000-memory.dmp
memory/3636-15-0x0000000006DA1000-0x0000000006DA2000-memory.dmp
memory/3636-16-0x0000000006EC0000-0x0000000006EC1000-memory.dmp
memory/3636-17-0x0000000007890000-0x0000000007891000-memory.dmp
memory/3636-18-0x0000000007A20000-0x0000000007AC5000-memory.dmp
memory/3636-19-0x0000000006DA6000-0x0000000006DA7000-memory.dmp