c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5 | Triage

Analysis

max time kernel
159s
max time network
173s
platform
windows10_x64
resource
win10-en-20211208
submitted
21-01-2022 23:10

Sharing

Report Analysis Logs

General

Target

c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5.exe
Size

9.6MB
MD5

d531bbcd30897e60026fced3be1bc836
SHA1

d101371f15f3359ec9adbbc935950047fd2e2a9f
SHA256

c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5
SHA512

7c93837b6a0a3ea3ed0411bf809221b2c8fcb49f03ea23c0bec127391c08a99468f7238d44555d0b5df8ccb8b44b1b9f3b651bb7e0cb4a5fcb9a82c48acd8006

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5.exe

description	pid	Process
Token: SeDebugPrivilege	2780	c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5.exe

C:\Users\Admin\AppData\Local\Temp\c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5.exe
"C:\Users\Admin\AppData\Local\Temp\c6dbdf2978bbadb222f2f03cd745f884226472531fd7aa96bc23c55735009ff5.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2780-118-0x0000000003C50000-0x0000000003C52000-memory.dmp

Filesize
8KB

Download
memory/2780-119-0x0000000003C52000-0x0000000003C54000-memory.dmp

Filesize
8KB

Download