21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88 | Triage™

Analysis

max time kernel
153s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12/06/2022, 07:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88.exe
Size 16KB
Sample220612-js9mjaggd5
SHA256 21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88
MD5 7e2b11e79653487b30cf0cc71d3a4909
SHA1 e559f81ef96a8b72dcac56920f00acf0f54267de
SHA512 99f1c5e5ede1ab960e1e67962653206008e0bee6d5efeea0a806cc93a8d3ef56c3730924d0f5ae9643de4aa6a23539006a287b2f91b866bd330936d8d22e2f28
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5016	21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88.exe

C:\Users\Admin\AppData\Local\Temp\21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88.exe
"C:\Users\Admin\AppData\Local\Temp\21a39840963f1dba36093f231492075fe4230adf89488b141a43f09f189b5e88.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5016-130-0x00007FF863550000-0x00007FF863F86000-memory.dmp

Download