Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    30-11-2021 08:03

General

  • Target

    PICTURE DRAWING DESIGN.exe

  • Size

    986KB

  • MD5

    bbc6caf6cfe3428798205216c2df85e1

  • SHA1

    ac68d4c0eb019bb5586057d2deb2174af18ad45a

  • SHA256

    eb869a427757689033110327cdcfbe5d406a47f60b3529b8903b0d00c1deb6e3

  • SHA512

    51dfda000e6dbb2f142c09e129b6fd87884ef3b642d289d69e2ceeee57d95386f22372bfb18038225d7bf37d5521776d7f072a2af174e1cfeb27d1df2565707b

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PICTURE DRAWING DESIGN.exe
    "C:\Users\Admin\AppData\Local\Temp\PICTURE DRAWING DESIGN.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2716-115-0x0000000000070000-0x0000000000071000-memory.dmp
    Filesize

    4KB

  • memory/2716-117-0x0000000005020000-0x0000000005021000-memory.dmp
    Filesize

    4KB

  • memory/2716-118-0x0000000004B20000-0x0000000004B21000-memory.dmp
    Filesize

    4KB

  • memory/2716-119-0x0000000004BC0000-0x0000000004BC1000-memory.dmp
    Filesize

    4KB

  • memory/2716-120-0x0000000004B20000-0x000000000501E000-memory.dmp
    Filesize

    5.0MB