7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7 | Triage™

Analysis

max time kernel
190s
max time network
197s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25/06/2022, 02:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7.exe
Size 16KB
Sample220625-de5tjadge2
SHA256 7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7
MD5 3cbadcf44ff25d556e2e263b5561d8b0
SHA1 f2e5701c2cd8a85b8ff7850a0600b63968a0ea44
SHA512 fd71b73fb954c93feaed0b14f6e3cbaf7a437aedd8390ff4dd6a86c4f9fd7e0c7f104eb3ced83d2d2035c4ef6aa13e4263c66b203479f7e9de5607828b75649d
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2624	7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7.exe

C:\Users\Admin\AppData\Local\Temp\7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7.exe
"C:\Users\Admin\AppData\Local\Temp\7f372f658787a0da083d50928770e4a79ee8c83bb351c21ef952326efd234cb7.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2624-131-0x00007FFCBC8E0000-0x00007FFCBD316000-memory.dmp

Download