Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    15-04-2022 05:17

General

  • Target

    9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe

  • Size

    13.8MB

  • MD5

    54cd85129c8794d8604b19e5b5c57da5

  • SHA1

    bc25fccdce4680397349e56a556fa78bc3b92a72

  • SHA256

    9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84

  • SHA512

    2bf8d7843bfbf9abd5f3759bf3d8eb3aeb9ab2c92481c6d7cd4ee808021703af73f7e58ee1f299f1372e06dc0c58a072bfd3a156b0e648e72ef59ac35e44b933

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe
    "C:\Users\Admin\AppData\Local\Temp\9dc243b14b2088b2c8107d5a2149fa85697b1d0c32fda114f9acc4a058cc7f84.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1992-130-0x0000000075300000-0x00000000758B1000-memory.dmp

    Filesize

    5.7MB