Analysis

  • max time kernel
    5s
  • max time network
    10s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    05-02-2022 09:24

General

  • Target

    Vital Information.exe

  • Size

    367KB

  • MD5

    97f0bc3ec5abdf8f7e84c6d19a58c496

  • SHA1

    081eb303fc0695f295ead9e347955ea16261576e

  • SHA256

    1ffe4436ccc049b0200df95c76b9ec4c601a597a5650ebbcc384dbb0b08ef14f

  • SHA512

    bbf428c3be49ca222738e12462776fda2b45dfa93270256ec8d05e3dbbf3567b1cf2480f58f0320eb4873ba0359f7a3fa2309e883b71dbdd527be581021e424f

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Vital Information.exe
    "C:\Users\Admin\AppData\Local\Temp\Vital Information.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2596-130-0x0000000000860000-0x00000000008C2000-memory.dmp

    Filesize

    392KB