Analysis
- max time kernel
91s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
22/09/2022, 01:05
General
- Target msf3.exe
- Size 5KB
- Sample220922-bfhz2shda9
- SHA256 9f1375f542db420157e7f2aa92a3ff1b1a4e4bf51cf37808ad93ddb1cbb3493d
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\msf3.exe"C:\Users\Admin\AppData\Local\Temp\msf3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3664-132-0x0000000000930000-0x0000000000938000-memory.dmp
memory/3664-133-0x00007FFE810B0000-0x00007FFE81B71000-memory.dmp
memory/3664-134-0x000000001B4E0000-0x000000001B519000-memory.dmp
memory/3664-139-0x0000000002920000-0x0000000002952000-memory.dmp
memory/3664-141-0x000000001CA20000-0x000000001CA8A000-memory.dmp
memory/3664-147-0x000000001C820000-0x000000001CA20000-memory.dmp
memory/3664-149-0x000000001B520000-0x000000001B548000-memory.dmp
memory/3664-154-0x000000001C820000-0x000000001CA20000-memory.dmp
memory/3664-155-0x00007FFE810B0000-0x00007FFE81B71000-memory.dmp
memory/3664-156-0x000000001C820000-0x000000001CA20000-memory.dmp
memory/3664-157-0x000000001C820000-0x000000001CA20000-memory.dmp