Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
30/08/2022, 13:21
General
- Target 1621d7692610119249e6a3342b4b7c0c.exe
- Size 392KB
- Sample220830-qlmyhshdfm
- SHA256 1f37241f90d9d5b92f91fbfcad22e1ff2d9224cd4bb612721beaff1d254a202b
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1621d7692610119249e6a3342b4b7c0c.exe"C:\Users\Admin\AppData\Local\Temp\1621d7692610119249e6a3342b4b7c0c.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1464-132-0x000000000095D000-0x0000000000987000-memory.dmp
memory/1464-134-0x0000000000400000-0x0000000000865000-memory.dmp
memory/1464-133-0x0000000002600000-0x0000000002637000-memory.dmp
memory/1464-135-0x0000000005060000-0x0000000005604000-memory.dmp
memory/1464-136-0x0000000005610000-0x0000000005C28000-memory.dmp
memory/1464-137-0x0000000005020000-0x0000000005032000-memory.dmp
memory/1464-138-0x0000000005C30000-0x0000000005D3A000-memory.dmp
memory/1464-139-0x0000000005D50000-0x0000000005D8C000-memory.dmp
memory/1464-140-0x000000000095D000-0x0000000000987000-memory.dmp