3a16c941223ae24e33b62e925575669a52f7993765aadf075a8bea5decd8a836 | Triage

Analysis

max time kernel
42s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
19-01-2022 08:10

Sharing

Report Analysis Logs

General

Target

7zS850A099E/61e7501b7eabe_Tue2344597f.exe
Size

527KB
MD5

8e0bc14c20fd607593967f164bbf08b5
SHA1

f68dc21b6352302d36cb1953ac0065e30d1ca6b0
SHA256

af8fbb1b23a21d1be75abcbb8d7c8447ec0c3b309fcfb407a91576a06070dcfe
SHA512

71cb5f5cfc5bb858a3ec2b7cf94d1d0652b5b66c505c4016c9d86e19ba86352d5f8f332df11be163c4aa1d3d36fc892bcc5bd5f2fbd6a383cd4e36c9885c7639

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

61e7501b7eabe_Tue2344597f.exe

description pid process

Token: SeDebugPrivilege 2036 61e7501b7eabe_Tue2344597f.exe

C:\Users\Admin\AppData\Local\Temp\7zS850A099E\61e7501b7eabe_Tue2344597f.exe
"C:\Users\Admin\AppData\Local\Temp\7zS850A099E\61e7501b7eabe_Tue2344597f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2036

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2036-131-0x00000000007E0000-0x000000000086A000-memory.dmp

Filesize
552KB

Download