Analysis
- max time kernel
150s - max time network
155s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
07/10/2021, 09:03
General
- Target 7c8518f835b3414b50fe1a90cbb8f6a9.exe
- Size 70KB
- Sample211007-kz4wascdcm
- SHA256 ccbd4b60f3df31f3a7dc9bd1b1b9fba22be8ed3378b9c3ec7d4fc06fd0047e62
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c8518f835b3414b50fe1a90cbb8f6a9.exe"C:\Users\Admin\AppData\Local\Temp\7c8518f835b3414b50fe1a90cbb8f6a9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2372-115-0x00000000002E0000-0x00000000002E1000-memory.dmp
memory/2372-117-0x00000000007E0000-0x00000000007E1000-memory.dmp
memory/2372-118-0x000000001B030000-0x000000001B032000-memory.dmp