af8d7c18fe97415d7ede0cba166dce004ebbe94eacd1af6f61d8d3527b015e22 | Triage™

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
resource tags

arch:x64arch:x86image:win10v2004-20220414-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2022, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bD0b.exe
Size 36KB
Sample220715-pawkvabebr
SHA256 af8d7c18fe97415d7ede0cba166dce004ebbe94eacd1af6f61d8d3527b015e22
MD5 abcf5f7c70c07d21545e780ede1666b6
SHA1 fa55b98ca838409f9b205d1cc4ca26acff7a3ad5
SHA512 da9adf16dc9751719228c179ef4caa1e277dba68e9e30756386be0d2bf8bdf42d2c23a6b02008fcae98fc9598b251c96c3312e372f1f89158540216ba2134e61
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3292	bD0b.exe

C:\Users\Admin\AppData\Local\Temp\bD0b.exe
"C:\Users\Admin\AppData\Local\Temp\bD0b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3292-130-0x00007FFB11230000-0x00007FFB11C66000-memory.dmp

Download