Analysis
- max time kernel
155s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
10/05/2022, 05:57
General
- Target 13cca2d8b69798bdd828fca14da8cdd8.exe
- Size 368KB
- Sample220510-gnlc2affg2
- SHA256 df0ffca2daa70a29b6884e97eba421cf4853c137f5a0ced9df5bee77d63b786b
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13cca2d8b69798bdd828fca14da8cdd8.exe"C:\Users\Admin\AppData\Local\Temp\13cca2d8b69798bdd828fca14da8cdd8.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/404-132-0x0000000000520000-0x0000000000557000-memory.dmp
memory/404-131-0x0000000000570000-0x0000000000670000-memory.dmp
memory/404-133-0x0000000000400000-0x000000000049E000-memory.dmp
memory/404-134-0x0000000004C00000-0x00000000051A4000-memory.dmp
memory/404-135-0x00000000051B0000-0x00000000057C8000-memory.dmp
memory/404-136-0x0000000005820000-0x0000000005832000-memory.dmp
memory/404-137-0x0000000005840000-0x000000000594A000-memory.dmp
memory/404-138-0x0000000005950000-0x000000000598C000-memory.dmp