f2b68fa107745b515e611eee99231eab7e03e022b4ff8af2bfe3b779ffbf61c4 | Triage

Analysis

max time kernel
19s
max time network
155s
platform
windows10_x64
resource
win10-en-20211208
submitted
13-12-2021 20:12

Sharing

Report Analysis Logs

General

Target

80bc1183c4d901de4fd1365eccd0f147.exe
Size

883KB
MD5

80bc1183c4d901de4fd1365eccd0f147
SHA1

d725b0664493a90ff4538bdc5f98d6161748e501
SHA256

f2b68fa107745b515e611eee99231eab7e03e022b4ff8af2bfe3b779ffbf61c4
SHA512

d62d9eae278c92f3041ebf63b38469465d4ecd3c555501b8dea73475d03572965af599455c75c34b3eb766212df0ba20a4a6c7c03ef262b38c871c4e29883385

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

80bc1183c4d901de4fd1365eccd0f147.exe

description pid process

Token: SeDebugPrivilege 3984 80bc1183c4d901de4fd1365eccd0f147.exe

C:\Users\Admin\AppData\Local\Temp\80bc1183c4d901de4fd1365eccd0f147.exe
"C:\Users\Admin\AppData\Local\Temp\80bc1183c4d901de4fd1365eccd0f147.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3984

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3984-115-0x00000000009B0000-0x00000000009B1000-memory.dmp

Filesize
4KB

Download
memory/3984-117-0x00000000053A0000-0x00000000053A1000-memory.dmp

Filesize
4KB

Download