38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b | Triage

Analysis

max time kernel
153s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25-06-2022 20:26

Sharing

Report Analysis Logs

General

Target

38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b.exe
Size

124KB
MD5

0f0fa88fbd9f56a6ee06e5ad8ca2a22a
SHA1

ac0ccde522befaaabbfeec316d1813bd0e4cb198
SHA256

38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b
SHA512

7a455166ff91aa92354654645ec5400e438cc753b3688d6b569c1d7e85298531c27318a6888e5c9c2910ec04dd1499f0ded0cab2d7bedf37cff480833cddddf5

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b.exe

description pid process

Token: SeDebugPrivilege 4280 38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b.exe

C:\Users\Admin\AppData\Local\Temp\38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b.exe
"C:\Users\Admin\AppData\Local\Temp\38507211d1541b45f4aed046e1034ee39de3c735e867988d6685b94fe76b939b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4280-130-0x00000000004E0000-0x0000000000506000-memory.dmp

Filesize
152KB

Download
memory/4280-131-0x00007FFB62E30000-0x00007FFB638F1000-memory.dmp

Filesize
10.8MB

Download
memory/4280-132-0x00007FFB62E30000-0x00007FFB638F1000-memory.dmp

Filesize
10.8MB

Download