Analysis
- max time kernel
90s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-en-20220112 - submitted
06/03/2022, 21:31
General
- Target af6213dbe89af70178e99cf16b51a7326664cfc585275b3cbda5ec397a75d1aa.exe
- Size 440KB
- Sample220306-1c4vsahadj
- SHA256 af6213dbe89af70178e99cf16b51a7326664cfc585275b3cbda5ec397a75d1aa
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af6213dbe89af70178e99cf16b51a7326664cfc585275b3cbda5ec397a75d1aa.exe"C:\Users\Admin\AppData\Local\Temp\af6213dbe89af70178e99cf16b51a7326664cfc585275b3cbda5ec397a75d1aa.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2272-130-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-131-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-132-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-134-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-136-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-138-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-140-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-142-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-144-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-146-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-148-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-150-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-152-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-154-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-156-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-158-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-160-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-162-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-164-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-166-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-168-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-170-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-172-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-174-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-176-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-178-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-180-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-182-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-185-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-187-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-189-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-191-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-193-0x0000000002120000-0x0000000002121000-memory.dmp
memory/2272-195-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-197-0x0000000002123000-0x0000000002124000-memory.dmp
memory/2272-199-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-200-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-196-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-192-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-188-0x0000000002119000-0x000000000211A000-memory.dmp
memory/2272-184-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-202-0x00000000020E0000-0x0000000002145000-memory.dmp
memory/2272-224-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-308-0x0000000077430000-0x00000000775D3000-memory.dmp
memory/2272-309-0x000000000211D000-0x000000000211E000-memory.dmp
memory/2272-310-0x000000000211A000-0x000000000211B000-memory.dmp
memory/2272-311-0x0000000077430000-0x00000000775D3000-memory.dmp