1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32 | Triage

Analysis

max time kernel
180s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12-05-2022 18:53

Sharing

Report Analysis Logs

General

Target

1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32.exe
Size

78KB
MD5

00ab2265b8b31c56c729ffe63191fac4
SHA1

c59c2138c9e098edc515340c2a84e2ef0973c332
SHA256

1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32
SHA512

e91ec018a5f4424bec6da75b19a3527764ae96e3106b06e9167e5a0a5dd55fd15c20bb03d1e48241c66f18f018248c04f1a74011873aeee656a5b500bdb0c4bf

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32.exe

description pid process

Token: SeDebugPrivilege 3012 1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32.exe

C:\Users\Admin\AppData\Local\Temp\1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32.exe
"C:\Users\Admin\AppData\Local\Temp\1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3012-130-0x0000000074EB0000-0x0000000075461000-memory.dmp

Filesize
5.7MB

Download