Analysis
- max time kernel
166s - max time network
173s - platform
windows10-2004_x64 - resource
win10v2004-20220310-en - submitted
11/03/2022, 07:33
General
- Target f76c8f768c9d8bb29b4b612a8738e419.exe
- Size 416KB
- Sample220311-jdkd4abfbn
- SHA256 4085ab42a1fdb112b69ddd3c800e14db649689cbb20977363a11abea97586882
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f76c8f768c9d8bb29b4b612a8738e419.exe"C:\Users\Admin\AppData\Local\Temp\f76c8f768c9d8bb29b4b612a8738e419.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3848-134-0x0000000000748000-0x0000000000774000-memory.dmp
memory/3848-135-0x0000000000748000-0x0000000000774000-memory.dmp
memory/3848-136-0x00000000020F0000-0x0000000002129000-memory.dmp
memory/3848-137-0x0000000000400000-0x00000000004F6000-memory.dmp
memory/3848-138-0x00000000748E0000-0x0000000075090000-memory.dmp
memory/3848-139-0x0000000004D50000-0x0000000004D51000-memory.dmp
memory/3848-140-0x0000000004D52000-0x0000000004D53000-memory.dmp
memory/3848-141-0x0000000004D53000-0x0000000004D54000-memory.dmp
memory/3848-142-0x0000000004D60000-0x0000000005304000-memory.dmp
memory/3848-143-0x0000000005510000-0x0000000005B28000-memory.dmp
memory/3848-144-0x00000000024D0000-0x00000000024E2000-memory.dmp
memory/3848-145-0x0000000005B30000-0x0000000005C3A000-memory.dmp
memory/3848-146-0x0000000004D54000-0x0000000004D56000-memory.dmp
memory/3848-147-0x0000000002510000-0x000000000254C000-memory.dmp
memory/3848-148-0x0000000005EB0000-0x0000000005F26000-memory.dmp
memory/3848-149-0x0000000000830000-0x00000000008C2000-memory.dmp
memory/3848-150-0x0000000005E60000-0x0000000005E7E000-memory.dmp
memory/3848-151-0x00000000060C0000-0x0000000006126000-memory.dmp