b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c | Triage

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-en-20220112
submitted
27-02-2022 02:55

Sharing

Report Analysis Logs

General

Target

b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c.exe
Size

274KB
MD5

e9eff0054dcde9e3588ca70c2a2f4258
SHA1

0bf96aa293e7b8618a0df2742f5336d394ee0afe
SHA256

b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c
SHA512

4c8c8a3d414bf999bf0c73bcc820669df74b883c140f90ce856c154dea7910121731adde335c91f338d75cbae5ca9655444426e1dec3df401caaadccda359bf1

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c.exe

description pid process

Token: SeDebugPrivilege 428 b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c.exe

C:\Users\Admin\AppData\Local\Temp\b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c.exe
"C:\Users\Admin\AppData\Local\Temp\b759243e0b1b03d3c7f3cf4bdb3f92f81432cb06192e25cb92127815f89ab48c.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/428-130-0x0000000000B20000-0x0000000000B6A000-memory.dmp

Filesize
296KB

Download
memory/428-131-0x00007FFFD0A93000-0x00007FFFD0A95000-memory.dmp

Filesize
8KB

Download
memory/428-132-0x000000001CEA0000-0x000000001CEA2000-memory.dmp

Filesize
8KB

Download