Analysis
- max time kernel
64s - max time network
133s - platform
windows10_x64 - resource
win10-en - submitted
07/09/2021, 06:03
General
- Target 15348d2e7e60df90c2148faeb1907cfd.exe
- Size 1.7MB
- Sample210907-gr4zjsfbgn
- SHA256 12b4d5b703c8e2261c3fd995514959fa6cefb4cc2ed8ea409ddfc8353f2de741
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\15348d2e7e60df90c2148faeb1907cfd.exe"C:\Users\Admin\AppData\Local\Temp\15348d2e7e60df90c2148faeb1907cfd.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4032-115-0x0000000000B20000-0x0000000000B21000-memory.dmp
memory/4032-117-0x0000000005B30000-0x0000000005B31000-memory.dmp
memory/4032-118-0x0000000005540000-0x0000000005541000-memory.dmp
memory/4032-119-0x0000000005630000-0x0000000005631000-memory.dmp
memory/4032-120-0x0000000005630000-0x0000000005B2E000-memory.dmp