Analysis
-
max time kernel
126s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
24-09-2022 23:42
General
-
Target
RAVAntivirus/rsWSC.exe
-
Size
199KB
-
MD5
7c63a48af0a0d0c910ad301dacdabc6a
-
SHA1
975a70586e6cc0b366e85d4955ca97df2513e196
-
SHA256
740db55eb89b8824ffe02612113de80e219673fc1c22187fcc2d3366ece8544d
-
SHA512
49b8c88398dde6bb9b407fcce050bd49a61c04fc7e1e7e2a6b10ebd8a4f4c8059c9bf55e3c61839bfa895a85cf2b575609eff29c85bf25943acae8b5bbecd54e
-
SSDEEP
3072:DZRsJDRkJLCuhA6pUcykg4XtabodDGbM+nkgRm19RBSLNn8XYJKkddRWJCWL:lKJVkJLvpUcl7XgbMDGbM+kTLGFgIw
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RAVAntivirus\rsWSC.exe"C:\Users\Admin\AppData\Local\Temp\RAVAntivirus\rsWSC.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4984-132-0x0000026E4D490000-0x0000026E4D4BE000-memory.dmpFilesize
184KB
-
memory/4984-133-0x00007FFB629C0000-0x00007FFB63481000-memory.dmpFilesize
10.8MB
-
memory/4984-134-0x00007FFB629C0000-0x00007FFB63481000-memory.dmpFilesize
10.8MB
-
memory/4984-135-0x00007FFB629C0000-0x00007FFB63481000-memory.dmpFilesize
10.8MB