Analysis
- max time kernel
131s - max time network
149s - platform
windows10_x64 - resource
win10v20210408 - submitted
15/05/2021, 19:11
General
- Target 18ED7FF73953F6FDE4E431522E5A8F49.exe
- Size 120KB
- Sample210515-7madfr89bx
- SHA256 46b2da7aa899ebe20f5dc948705e9634b0b58df5c859d4b89cabe1922f582649
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18ED7FF73953F6FDE4E431522E5A8F49.exe"C:\Users\Admin\AppData\Local\Temp\18ED7FF73953F6FDE4E431522E5A8F49.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/596-114-0x0000000000990000-0x0000000000991000-memory.dmp
memory/596-116-0x0000000005840000-0x0000000005841000-memory.dmp
memory/596-117-0x00000000052F0000-0x00000000052F1000-memory.dmp
memory/596-118-0x0000000005350000-0x0000000005351000-memory.dmp
memory/596-119-0x0000000005390000-0x0000000005391000-memory.dmp
memory/596-120-0x0000000005230000-0x0000000005836000-memory.dmp
memory/596-121-0x0000000005630000-0x0000000005631000-memory.dmp