Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
03-08-2022 04:10
Behavioral task
behavioral1
Sample
bDTn.exe
Resource
win7-20220715-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bDTn.exe
Resource
win10v2004-20220721-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bDTn.exe
-
Size
36KB
-
MD5
f09845a7b617f093887d29554e795081
-
SHA1
90fe8bd31ed126fd5dcdd292e0054e0a6e2e70d5
-
SHA256
e10753f08dd4399bfb6de99a86ee12d32aaac6eb6f42da26055a1abc26043650
-
SHA512
ba040be9a1f39706e7ad21cdeb632476ab8bad25d6be5c76a4e58f17c2eb7848753210dde23e44d919f895648419313e055fae39a897644e0c70bca39c1c34a8
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
bDTn.exedescription pid process Token: SeDebugPrivilege 3528 bDTn.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3528-130-0x00007FFCD30D0000-0x00007FFCD3B06000-memory.dmpFilesize
10.2MB