531ac8ecf59747c2ff9cb3501e6acfb50dd2cc6b2abf8e7ee682f01877903e42 | Triage

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220715-en
resource tags

arch:x64arch:x86image:win10v2004-20220715-enlocale:en-usos:windows10-2004-x64system
submitted
18-07-2022 01:08

Sharing

Report Analysis Logs

General

Target

bD2K.exe
Size

36KB
MD5

3ba6910d5842f3a1c425c13fc7bbafa6
SHA1

2a0612632b43330eeec4d738d965e0d49650fa23
SHA256

531ac8ecf59747c2ff9cb3501e6acfb50dd2cc6b2abf8e7ee682f01877903e42
SHA512

ca12064ac5bec6db2ef92d66b330d5d5a1a87914e9604ff593b8aa5fd3057ca0c242a50bd28337a7c758438aefa9ceeaa7e68eec46a1bf77dcb0bb247d8605e4

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

bD2K.exe

description pid process

Token: SeDebugPrivilege 4656 bD2K.exe

C:\Users\Admin\AppData\Local\Temp\bD2K.exe
"C:\Users\Admin\AppData\Local\Temp\bD2K.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4656-130-0x000000001C1F0000-0x000000001CC26000-memory.dmp

Filesize
10.2MB

Download