Resubmissions

16/10/2022, 11:14

221016-ncc1vahchq 3

16/10/2022, 10:55

221016-m1apyshbhl 3

Analysis

  • max time kernel
    227s
  • max time network
    294s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/10/2022, 11:14

General

  • Target

    51cb8ce9a305fe049a17da02e398cc27f1adfc54f4351160fd5f8095cbc37c26.exe

  • Size

    4.0MB

  • MD5

    a2287613c53f1a3ac79628f138221339

  • SHA1

    b0a2fa9f4c02c79e004c2028c145a8bd779d44c7

  • SHA256

    51cb8ce9a305fe049a17da02e398cc27f1adfc54f4351160fd5f8095cbc37c26

  • SHA512

    2a82262d38037f35a4cea17caacb887c8234d70ad8d87eb21260bd6fa3db2820db5de7814a8dd6b9986c1893199aceab9befb7d7e323a1b72ec9f35f5fc0b92d

  • SSDEEP

    98304:eFKLuV9+qmC4+ntFjpyJhOrU2S4NiizWRwGEL1wFRquoTv:QV4qI+t1py/OrUo0iWRrowXoT

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\51cb8ce9a305fe049a17da02e398cc27f1adfc54f4351160fd5f8095cbc37c26.exe
    "C:\Users\Admin\AppData\Local\Temp\51cb8ce9a305fe049a17da02e398cc27f1adfc54f4351160fd5f8095cbc37c26.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1636

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1636-133-0x0000025E45F30000-0x0000025E46340000-memory.dmp

          Filesize

          4.1MB

        • memory/1636-134-0x00007FF860B00000-0x00007FF8615C1000-memory.dmp

          Filesize

          10.8MB

        • memory/1636-135-0x00007FF860B00000-0x00007FF8615C1000-memory.dmp

          Filesize

          10.8MB

        • memory/1636-136-0x00007FF860B00000-0x00007FF8615C1000-memory.dmp

          Filesize

          10.8MB