209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f | Triage

Analysis

max time kernel
148s
max time network
108s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 04:05

Sharing

Report Analysis Logs

General

Target

209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f.exe
Size

16KB
MD5

22dd5f71f6e77f1f9ab88d898bf65a73
SHA1

c811146aa5e4bbe1927a47f6462655677c19b951
SHA256

209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f
SHA512

9cf908242ee484835924f840950dd0552f4dad3b11074f2a69cc628c6bcdd2654e2822362e451e62ea301009dba7b0d52705af87e523b7132f9bfdb878148383

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f.exe

description pid process

Token: SeDebugPrivilege 4912 209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f.exe

C:\Users\Admin\AppData\Local\Temp\209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f.exe
"C:\Users\Admin\AppData\Local\Temp\209a3bee9b7bc06c8aaa8c607df850ec05f58892e6ea1cfec2cbbdab6501ee2f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4912-130-0x00007FF8D5930000-0x00007FF8D6366000-memory.dmp

Filesize
10.2MB

Download