Analysis

  • max time kernel
    187s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 15:03

General

  • Target

    3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe

  • Size

    88KB

  • MD5

    6e20aa8f004017763ac6f8628499cfbe

  • SHA1

    3cddae986f6d5e3528014be4a4b7d14717e6eefb

  • SHA256

    3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f

  • SHA512

    6538d9f1a0e78d4263270d6e185a6316af506a07050637235f74ed3d2931d52f4a2fc7efa5fcedcb4d343e15d182e3845ac5d59a9c7a56d8adfb18b0364c913a

  • SSDEEP

    1536:ay5nTJF5K7eb0mLv7bZvWm1eMOEI3PXASJUAJf8e1CDQ:xVQKbX7bZvdeMOEOoShJf8vQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe
    "C:\Users\Admin\AppData\Local\Temp\3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2088-132-0x0000000074F70000-0x0000000075521000-memory.dmp

    Filesize

    5.7MB

  • memory/2088-133-0x0000000074F70000-0x0000000075521000-memory.dmp

    Filesize

    5.7MB