2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39 | Triage

Analysis

max time kernel
148s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
15-06-2022 02:41

Sharing

Report Analysis Logs

General

Target

2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe
Size

16KB
MD5

a56aa3ce4d2a8e380de08e514ac05751
SHA1

4854310d611f4fdd79268a8947bbed363a00ca67
SHA256

2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39
SHA512

baaddb1c371041b55fca483ec25a8238e4c0fbbb2cf6958eb973a140176792755e2ac62e44b40a5fdb5102952a46b503249ea3f65e624cacf97febee201c9530

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe

description pid process

Token: SeDebugPrivilege 1992 2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe

C:\Users\Admin\AppData\Local\Temp\2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe
"C:\Users\Admin\AppData\Local\Temp\2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-55-0x000007FEF1B70000-0x000007FEF2C06000-memory.dmp

Filesize
16.6MB

Download