Analysis
- max time kernel
120s - max time network
122s - platform
windows7_x64 - resource
win7-en-20210920 - submitted
24/10/2021, 23:17
General
- Target RFQ-WO10 #384573-pdf.exe
- Size 27KB
- Sample211024-29pb2agcfl
- SHA256 119d1a20d3e248a55981b6798bfd80191217e143feaa1e2774e4cb813bfbe6bf
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RFQ-WO10 #384573-pdf.exe"C:\Users\Admin\AppData\Local\Temp\RFQ-WO10 #384573-pdf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1876-54-0x0000000001240000-0x0000000001241000-memory.dmp
memory/1876-56-0x00000000759B1000-0x00000000759B3000-memory.dmp
memory/1876-57-0x00000000047E0000-0x00000000047E1000-memory.dmp