9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84 | Triage

Analysis

max time kernel
134s
max time network
150s
platform
windows7_x64
resource
win7-20220414-en
submitted
15-04-2022 05:17

Sharing

Report Analysis Logs

General

Target

9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe
Size

13.8MB
MD5

54cd85129c8794d8604b19e5b5c57da5
SHA1

bc25fccdce4680397349e56a556fa78bc3b92a72
SHA256

9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84
SHA512

2bf8d7843bfbf9abd5f3759bf3d8eb3aeb9ab2c92481c6d7cd4ee808021703af73f7e58ee1f299f1372e06dc0c58a072bfd3a156b0e648e72ef59ac35e44b933

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe

description pid process

Token: SeDebugPrivilege 2012 9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe

C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe
"C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2012-54-0x0000000075951000-0x0000000075953000-memory.dmp

Filesize
8KB

Download
memory/2012-55-0x0000000074710000-0x0000000074CBB000-memory.dmp

Filesize
5.7MB

Download