5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44 | Triage

Analysis

max time kernel
30s
max time network
47s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
01-08-2022 15:15

Sharing

Report Analysis Logs

General

Target

5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44.exe
Size

186KB
MD5

c575e868cfda9c54c652520116399024
SHA1

6cd5e110d88d549581710da849345fac4d1bdbc7
SHA256

5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44
SHA512

ec3fe0067e3adf7b38441347a67c8679157cf5f43bfbc882a3c83643131c35353db9031f35ec680da076ab8186189cdbf00fa3c6f52b61bcac8c872a200a3a73

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44.exe

description pid process

Token: SeDebugPrivilege 608 5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44.exe

C:\Users\Admin\AppData\Local\Temp\5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44.exe
"C:\Users\Admin\AppData\Local\Temp\5c3ad0ed491dd2b003d9037187a8e06845b85ab418f0426b866eb6779b90af44.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:608

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/608-54-0x00000000001B0000-0x00000000001E4000-memory.dmp

Filesize
208KB

Download
memory/608-55-0x0000000000230000-0x0000000000250000-memory.dmp

Filesize
128KB

Download