caaf7a0ba0be857a3b9ffadb1721a2f8e1ce053de3e54c58971c24235acb8952 | Triage

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 04:06

Sharing

Report Analysis Logs

General

Target

snxdx/?????.exe
Size

74KB
MD5

2eab259424f6d41b2ae46343f34ffb3d
SHA1

2c1b3d849074ec953be2740db933886e4a86d164
SHA256

7f0309078b3bda7137d13984587d28e6a36675a4381039f26c52052bef9c3770
SHA512

6e56eea55b159fe7564d78fd23a9a69787203e4a2b3be001ad5c141633c192ddc2bf536461f34651900fb5fd41b2e75543a0f73cc90e2bc97526d6223fb12343

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

_____.exe

description pid process

Token: SeDebugPrivilege 3452 _____.exe

C:\Users\Admin\AppData\Local\Temp\snxdx\_____.exe
"C:\Users\Admin\AppData\Local\Temp\snxdx\_____.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3452-130-0x0000000004B40000-0x00000000050E4000-memory.dmp

Filesize
5.6MB

Download
memory/3452-131-0x0000000004980000-0x0000000004A12000-memory.dmp

Filesize
584KB

Download
memory/3452-132-0x0000000004A50000-0x0000000004A5A000-memory.dmp

Filesize
40KB

Download
memory/3452-133-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download