Analysis
- max time kernel
34s - max time network
141s - platform
windows10_x64 - resource
win10v20201028 - submitted
09/04/2021, 08:16
General
- Target 4a8fdd5b9b821830f1e4a392abd1b346.exe
- Size 9.7MB
- Sample210409-8sb49at39n
- SHA256 5dcb736bf556729b30654fe97da034c1ccd7471f7587cb82dc33f4aef2248b9c
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a8fdd5b9b821830f1e4a392abd1b346.exe"C:\Users\Admin\AppData\Local\Temp\4a8fdd5b9b821830f1e4a392abd1b346.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1176-114-0x0000000002C50000-0x0000000002C52000-memory.dmp
memory/1176-115-0x0000000002C52000-0x0000000002C54000-memory.dmp