Analysis
- max time kernel
137s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
01/09/2022, 07:51
General
- Target fb2c1a55b38a17dcb25c05b4aacb4443.exe
- Size 389KB
- Sample220901-jptrxaccg9
- SHA256 235667aad7d9f703f1042e857b70bfb7b9b0b2b5bcde1af6fe63663a02064a5b
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb2c1a55b38a17dcb25c05b4aacb4443.exe"C:\Users\Admin\AppData\Local\Temp\fb2c1a55b38a17dcb25c05b4aacb4443.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4160-132-0x00000000072F0000-0x0000000007894000-memory.dmp
memory/4160-133-0x0000000002E41000-0x0000000002E6B000-memory.dmp
memory/4160-134-0x00000000048E0000-0x0000000004917000-memory.dmp
memory/4160-135-0x0000000000400000-0x0000000002BA9000-memory.dmp
memory/4160-136-0x00000000078A0000-0x0000000007EB8000-memory.dmp
memory/4160-137-0x0000000007F40000-0x0000000007F52000-memory.dmp
memory/4160-138-0x0000000007F60000-0x000000000806A000-memory.dmp
memory/4160-139-0x0000000008090000-0x00000000080CC000-memory.dmp
memory/4160-140-0x0000000002E41000-0x0000000002E6B000-memory.dmp