6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5 | Triage

Analysis

max time kernel
148s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 04:05

Sharing

Report Analysis Logs

General

Target

6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5.exe
Size

16KB
MD5

65b1180b492002ebc48630e892176aa9
SHA1

e5124246076b02e6e72205d1520352322b06c0db
SHA256

6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5
SHA512

dd465ca226250f5329cbf6bb58a946a4efb06b0944ada3db7e2347dcd85b10c0eaef0a2ae41ee48465cd9ffa7d77409c3944516cb56a7aa73eb201ddebad9ee7

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5.exe

description pid process

Token: SeDebugPrivilege 2020 6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5.exe

C:\Users\Admin\AppData\Local\Temp\6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5.exe
"C:\Users\Admin\AppData\Local\Temp\6b2bfd934eb3ac332b909ed957468e7e74869c424c92a28995f30e8a46f3bad5.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-54-0x000007FEF4CA0000-0x000007FEF56C3000-memory.dmp

Filesize
10.1MB

Download
memory/2020-55-0x000007FEF39C0000-0x000007FEF4A56000-memory.dmp

Filesize
16.6MB

Download