078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7 | Triage

Analysis

max time kernel
151s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
31-05-2022 01:38

Sharing

Report Analysis Logs

General

Target

078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe
Size

97KB
MD5

097799c75bbcdbe2cfd3bfdb88ec08f8
SHA1

a18e324f0699d80abd23534613287e6d307c829d
SHA256

078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7
SHA512

d082373fe9670c2cea543cf28e618ce15a569055fa057ee9a02ef0fb701677700511b3cd6b4b913b0f1c3a6998732c0d9909b2ad536933519e5c9fec31ac80b9

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe

description pid process

Token: SeDebugPrivilege 2884 078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe

C:\Users\Admin\AppData\Local\Temp\078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe
"C:\Users\Admin\AppData\Local\Temp\078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2884-130-0x0000000000350000-0x000000000036E000-memory.dmp

Filesize
120KB

Download
memory/2884-131-0x000000001AE90000-0x000000001AF4A000-memory.dmp

Filesize
744KB

Download
memory/2884-132-0x00007FFD67410000-0x00007FFD67ED1000-memory.dmp

Filesize
10.8MB

Download
memory/2884-133-0x00007FFD67410000-0x00007FFD67ED1000-memory.dmp

Filesize
10.8MB

Download