559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722 | Triage™

Analysis

max time kernel
151s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20/05/2022, 17:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722.exe
Size 16KB
Sample220520-wj669sbcf9
SHA256 559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722
MD5 0bdb6c683a46413c9cc6c54d9e724c25
SHA1 3d82d132752cfb23ea388d517bcb3f7aa81e9d5e
SHA512 d9b7d778545a6f9d5013ffc15ef03e45da635fdc6d9289080024adc9ea6d581e600884aa631a945e4dab58ad85789d9249420d7266f103b3ed74a42c3bc0ac98
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3196	559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722.exe

C:\Users\Admin\AppData\Local\Temp\559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722.exe
"C:\Users\Admin\AppData\Local\Temp\559011f5cf61206f21b009e0396916444d970643310ea38662023d34d008d722.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3196-130-0x00007FFBC1D30000-0x00007FFBC2766000-memory.dmp

Download