2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39 | Triage™

Analysis

max time kernel
192s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15/06/2022, 02:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe
Size 16KB
Sample220615-c6wt9sddb4
SHA256 2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39
MD5 a56aa3ce4d2a8e380de08e514ac05751
SHA1 4854310d611f4fdd79268a8947bbed363a00ca67
SHA512 baaddb1c371041b55fca483ec25a8238e4c0fbbb2cf6958eb973a140176792755e2ac62e44b40a5fdb5102952a46b503249ea3f65e624cacf97febee201c9530
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1952	2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe

C:\Users\Admin\AppData\Local\Temp\2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe
"C:\Users\Admin\AppData\Local\Temp\2b4c18836496c06e9eccf6e10193f775c1f42b0447cd215601d2139536b0bd39.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1952-130-0x00007FFBA3170000-0x00007FFBA3BA6000-memory.dmp

Download