Analysis
-
max time kernel
27s -
max time network
35s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
13-05-2021 11:37
General
-
Target
22961884ec91198d749373dd6de5792b7ba552fc7685b01708fd2729bdd65607.exe
-
Size
1.8MB
-
MD5
5d167db352322b0b3cb0d2da677212db
-
SHA1
ec548e7cb162dde8858a1f76f6ff3d7eb0edea60
-
SHA256
22961884ec91198d749373dd6de5792b7ba552fc7685b01708fd2729bdd65607
-
SHA512
509fa1d23b17f474a2b585dab4b4b52e8946a00477225b560cfd22a753449f3b2f1ad41b0a70e8cee713662a3fe7dd6bb4bd61b9ad9f169de2c2ed2adc2ce06b
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\22961884ec91198d749373dd6de5792b7ba552fc7685b01708fd2729bdd65607.exe"C:\Users\Admin\AppData\Local\Temp\22961884ec91198d749373dd6de5792b7ba552fc7685b01708fd2729bdd65607.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/660-114-0x0000000000A50000-0x0000000000A51000-memory.dmpFilesize
4KB
-
memory/660-116-0x0000000005970000-0x0000000005971000-memory.dmpFilesize
4KB
-
memory/660-117-0x0000000005460000-0x0000000005461000-memory.dmpFilesize
4KB
-
memory/660-118-0x00000000056C0000-0x00000000056FB000-memory.dmpFilesize
236KB
-
memory/660-119-0x00000000057B0000-0x00000000057B1000-memory.dmpFilesize
4KB
-
memory/660-120-0x0000000005F10000-0x0000000005F11000-memory.dmpFilesize
4KB
-
memory/660-121-0x0000000005463000-0x0000000005465000-memory.dmpFilesize
8KB
-
memory/660-122-0x0000000005EB0000-0x0000000005EBF000-memory.dmpFilesize
60KB
-
memory/660-123-0x0000000006CE0000-0x0000000006CE1000-memory.dmpFilesize
4KB
-
memory/660-124-0x0000000006D30000-0x0000000006D31000-memory.dmpFilesize
4KB
-
memory/660-125-0x000000000AA70000-0x000000000AA71000-memory.dmpFilesize
4KB
-
memory/660-126-0x0000000005465000-0x0000000005466000-memory.dmpFilesize
4KB