Analysis
- max time kernel
148s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
30/08/2022, 06:33
General
- Target 5ea1d9a728886c0b988139d58491ce1e.exe
- Size 392KB
- Sample220830-ha681sebf8
- SHA256 78f9b1706c10d0d739bd4e3269bfee86f690db7f98edd27ee9c500b24837bca9
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ea1d9a728886c0b988139d58491ce1e.exe"C:\Users\Admin\AppData\Local\Temp\5ea1d9a728886c0b988139d58491ce1e.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/628-132-0x00000000009AE000-0x00000000009D8000-memory.dmp
memory/628-133-0x00000000025B0000-0x00000000025E7000-memory.dmp
memory/628-134-0x0000000000400000-0x0000000000865000-memory.dmp
memory/628-135-0x0000000005190000-0x0000000005734000-memory.dmp
memory/628-136-0x0000000005740000-0x0000000005D58000-memory.dmp
memory/628-137-0x0000000002AD0000-0x0000000002AE2000-memory.dmp
memory/628-138-0x0000000005050000-0x000000000515A000-memory.dmp
memory/628-139-0x0000000005D60000-0x0000000005D9C000-memory.dmp
memory/628-140-0x00000000009AE000-0x00000000009D8000-memory.dmp