caaf7a0ba0be857a3b9ffadb1721a2f8e1ce053de3e54c58971c24235acb8952 | Triage

Analysis

max time kernel
24s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 04:06

Sharing

Report Analysis Logs

General

Target

snxdx/?????.exe
Size

74KB
MD5

2eab259424f6d41b2ae46343f34ffb3d
SHA1

2c1b3d849074ec953be2740db933886e4a86d164
SHA256

7f0309078b3bda7137d13984587d28e6a36675a4381039f26c52052bef9c3770
SHA512

6e56eea55b159fe7564d78fd23a9a69787203e4a2b3be001ad5c141633c192ddc2bf536461f34651900fb5fd41b2e75543a0f73cc90e2bc97526d6223fb12343

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

_____.exe

description pid process

Token: SeDebugPrivilege 1496 _____.exe

C:\Users\Admin\AppData\Local\Temp\snxdx\_____.exe
"C:\Users\Admin\AppData\Local\Temp\snxdx\_____.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1496-54-0x0000000000850000-0x0000000000860000-memory.dmp

Filesize
64KB

Download
memory/1496-55-0x0000000075711000-0x0000000075713000-memory.dmp

Filesize
8KB

Download
memory/1496-56-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/1496-57-0x0000000004648000-0x0000000004659000-memory.dmp

Filesize
68KB

Download