Analysis
-
max time kernel
167s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
21-05-2022 12:34
General
-
Target
Doc10.exe
-
Size
508KB
-
MD5
a55491d76809f0c2ce2534145b58c2fb
-
SHA1
2ba489657ea9b82d76a5398f80bb31e2cfec6294
-
SHA256
d15344ff431c8df1a1de0618b7e0f4dfee59999eb7f26de6d462cc9c8e80a54a
-
SHA512
56e439f76b9b073e8b575accab64ca2d98c7a4de9a6c0df1d66247fdc2d3f3add250b1bc4a140bc06d72c2436be6e0766a64e4705386de06335539ba50ab9bb1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Doc10.exe"C:\Users\Admin\AppData\Local\Temp\Doc10.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2696-130-0x0000000000D00000-0x0000000000D84000-memory.dmpFilesize
528KB
-
memory/2696-131-0x0000000005C70000-0x0000000006214000-memory.dmpFilesize
5.6MB
-
memory/2696-132-0x0000000005760000-0x00000000057F2000-memory.dmpFilesize
584KB
-
memory/2696-133-0x0000000005750000-0x000000000575A000-memory.dmpFilesize
40KB
-
memory/2696-134-0x0000000005AC0000-0x0000000005B5C000-memory.dmpFilesize
624KB
-
memory/2696-135-0x0000000006350000-0x00000000063B6000-memory.dmpFilesize
408KB