37670f71a35213217cab145aa7e262e0e46e411007b2d68f26e74c3d44693e95 | Triage

Analysis

max time kernel
153s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
11-08-2022 02:05

Sharing

Report Analysis Logs

General

Target

Opensea Mint/helper.bat
Size

35KB
MD5

d65a44d4cce82fee1f78ca2e69412b5d
SHA1

ee4b981da214feb54aee7cf484233dc321a9ad8e
SHA256

6a4d441c2fa1d8d37b0189c7147a4b5424d5cdb122a7fc1fbebd022864ed54fb
SHA512

241490100a87d1f218fa23f86bee2bd6b29beb4067904d6626f790d35cfc8244f99b38c3fa54293b4d0d86890bc1a428580511465cab92cc72c590db2b05bfd0

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

cmd.exe

description pid process

Token: SeSystemtimePrivilege 4960 cmd.exe
Token: SeSystemtimePrivilege 4960 cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Opensea Mint\helper.bat"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4960

C:\Windows\System32\Upfc.exe
C:\Windows\System32\Upfc.exe /launchtype periodic /cv uYr1ur2btUmtqAm00BVi0g.0
1⤵
PID:4932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...