9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84 | Triage™

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15/04/2022, 05:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe
Size 13.8MB
Sample220415-fy5c8afdfm
SHA256 9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84
MD5 54cd85129c8794d8604b19e5b5c57da5
SHA1 bc25fccdce4680397349e56a556fa78bc3b92a72
SHA512 2bf8d7843bfbf9abd5f3759bf3d8eb3aeb9ab2c92481c6d7cd4ee808021703af73f7e58ee1f299f1372e06dc0c58a072bfd3a156b0e648e72ef59ac35e44b933
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1992	9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe

C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe
"C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-130-0x0000000075300000-0x00000000758B1000-memory.dmp

Download