Resubmissions

15-11-2024 18:05

241115-wpjcdsxrdy 10

11-11-2024 21:40

241111-1h6xbsxcql 10

03-12-2022 17:54

221203-wg4ncscc33 10

Analysis

  • max time kernel
    177s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 17:54

General

  • Target

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe

  • Size

    8KB

  • MD5

    fd1489c65b0d75f4cdc7b1f2634b5359

  • SHA1

    f8431629d627f8dc13ca486e8b5d0a46f47d46fd

  • SHA256

    463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea

  • SHA512

    e4fc02e1567e188caaf67ccd3a068e6b9db1c20b22a6949ec9ffd9d1a037afe36d744ac8c94a0fd5df55c7e2a51c10a9bcf05c3274175c8296cf16be718a99a2

  • SSDEEP

    96:a9hcOxiPwrltSJ1+pa/4/pzzkZj6tfCIQJ25FsfQungwffm2gbFnU:avc4rvpPd4Z+t6BJyungwffPZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe
    "C:\Users\Admin\AppData\Local\Temp\463d0b090396ffa05d579521256e421080a955415554feebe490482551eb08ea.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3412-132-0x0000000000F00000-0x0000000000F06000-memory.dmp

    Filesize

    24KB

  • memory/3412-133-0x00007FFD89850000-0x00007FFD8A311000-memory.dmp

    Filesize

    10.8MB

  • memory/3412-134-0x00007FFD89850000-0x00007FFD8A311000-memory.dmp

    Filesize

    10.8MB