fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e | Triage™

Analysis

max time kernel
151s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08/05/2022, 07:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e.exe
Size 64KB
Sample220508-jb9afaebak
SHA256 fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e
MD5 b73b9a8a112554ab95dd32127a956f0f
SHA1 f4d80a626478f9826136c9095b621d416b767716
SHA512 5e906dc7dd5f7a854893b0bb7f078da33f66bb37814458485b77f7d0d159b64f526b31408a0a3744d9434fb6c88885cf5ac09c3b41ec890ba7affb8192f7dff0
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1908	fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e.exe

C:\Users\Admin\AppData\Local\Temp\fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e.exe
"C:\Users\Admin\AppData\Local\Temp\fea1a613c593ac33939114386759136d4d5ec6017faad9cd11cb119200257d0e.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1908-130-0x00000000746B0000-0x0000000074C61000-memory.dmp

Download