f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916 | Triage

Analysis

max time kernel
148s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15-04-2022 04:55

Sharing

Report Analysis Logs

General

Target

f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916.exe
Size

255KB
MD5

78811734210f5cb8a109219158106f0b
SHA1

57dbb28d84657c5c50755b4145cc636dc217ca60
SHA256

f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916
SHA512

eaf56f7f6d9d89bbc20c89abc0d3c3115aad62648814836710efc9a5358fefb27dc888a1db8a80892fc6b6e5d4fff6c2cadc29235a53db3f1d034a5a0ad891ce

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916.exe

description pid process

Token: SeDebugPrivilege 864 f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916.exe

C:\Users\Admin\AppData\Local\Temp\f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916.exe
"C:\Users\Admin\AppData\Local\Temp\f496d911d3344af57ae899b68cdd024bdbc47d155a03b9a34a0175dd92a06916.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/864-130-0x00000000749D0000-0x0000000074F81000-memory.dmp

Filesize
5.7MB

Download