b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b | Triage

Resubmissions

16-01-2022 12:57

220116-p6z8xafdg4 1

16-01-2022 12:54

220116-p48ghafdf7 10

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-en-20211208
submitted
16-01-2022 12:57

Sharing

Report Analysis Logs

General

Target

b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe
Size

241KB
MD5

7120733f34bb6d7ccf174779d3058d3f
SHA1

f2392bcadf03bc4c253a95199bf4be1947898255
SHA256

b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b
SHA512

c39778c1e678264c15f85db3b1628e3047375f0671bfa2d756efc053e74a7289f9bc5f5807c9e246e625bfe09bc3e9b8590a67fef2a0710032521225a693745e

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	880	b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe

C:\Users\Admin\AppData\Local\Temp\b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe
"C:\Users\Admin\AppData\Local\Temp\b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/880-55-0x0000000000DD0000-0x0000000000E12000-memory.dmp

Filesize
264KB

Download
memory/880-56-0x0000000000DD0000-0x0000000000E12000-memory.dmp

Filesize
264KB

Download
memory/880-57-0x0000000000D40000-0x0000000000D42000-memory.dmp

Filesize
8KB

Download