Analysis
- max time kernel
147s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20220331-en - submitted
05/04/2022, 16:31
General
- Target 107a4f9aed9b5b56b974f751b02cc3f8.exe
- Size 353KB
- Sample220405-t1cymsddan
- SHA256 c883287c8c41b5e13607776fa22c630cea42c9d7141aa31fe3c7a147a6fb548d
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\107a4f9aed9b5b56b974f751b02cc3f8.exe"C:\Users\Admin\AppData\Local\Temp\107a4f9aed9b5b56b974f751b02cc3f8.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2088-124-0x0000000000522000-0x000000000054C000-memory.dmp
memory/2088-125-0x0000000000522000-0x000000000054C000-memory.dmp
memory/2088-126-0x00000000020A0000-0x00000000020D8000-memory.dmp
memory/2088-127-0x0000000000400000-0x0000000000484000-memory.dmp
memory/2088-128-0x0000000004C00000-0x00000000051A4000-memory.dmp
memory/2088-129-0x00000000052B0000-0x00000000058C8000-memory.dmp
memory/2088-130-0x0000000004BB0000-0x0000000004BC2000-memory.dmp
memory/2088-131-0x00000000058D0000-0x00000000059DA000-memory.dmp
memory/2088-132-0x00000000059E0000-0x0000000005A1C000-memory.dmp
memory/2088-133-0x0000000004BF4000-0x0000000004BF6000-memory.dmp