36e7deadeeb8b242b2cdbf3b561899ed1ac51bbdbc194ab046ae961c76e0086a | Triage

Analysis

max time kernel
121s
max time network
151s
platform
windows7_x64
resource
win7-en-20210920
submitted
25-10-2021 07:37

Sharing

Report Analysis Logs

General

Target

2cd4afe2b620eb73e0adc46cf8ce8da4.exe
Size

69KB
MD5

2cd4afe2b620eb73e0adc46cf8ce8da4
SHA1

e1cb6f41e2eeaae01cc895ea5f7427b70cdf572a
SHA256

36e7deadeeb8b242b2cdbf3b561899ed1ac51bbdbc194ab046ae961c76e0086a
SHA512

f17c7aaa8becb1f783349bf1e042b1c8faa32ed8b6fe4f1576f331b2ab4670792939f6f88f4b5efd735e56a703c00079b7065ac621e647a4d07fa2eea15b4ba8

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

2cd4afe2b620eb73e0adc46cf8ce8da4.exe

description pid process

Token: SeDebugPrivilege 580 2cd4afe2b620eb73e0adc46cf8ce8da4.exe

C:\Users\Admin\AppData\Local\Temp\2cd4afe2b620eb73e0adc46cf8ce8da4.exe
"C:\Users\Admin\AppData\Local\Temp\2cd4afe2b620eb73e0adc46cf8ce8da4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/580-54-0x0000000001260000-0x0000000001261000-memory.dmp

Filesize
4KB

Download
memory/580-56-0x00000000757B1000-0x00000000757B3000-memory.dmp

Filesize
8KB

Download
memory/580-57-0x0000000001140000-0x0000000001141000-memory.dmp

Filesize
4KB

Download