Analysis
- max time kernel
135s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
- submitted
28/12/2022, 20:18
General
- Target aec58061129c62ca4be315d7d758162c.exe
- Size 398KB
- Sample221228-y29q8aee8s
- SHA256 2180a9c2d87fcd9da7edbe33ede275afdb638b78a76e9aa9f464ff3c8552c255
Score
5/10
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aec58061129c62ca4be315d7d758162c.exe"C:\Users\Admin\AppData\Local\Temp\aec58061129c62ca4be315d7d758162c.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\aec58061129c62ca4be315d7d758162c.exe"C:\Users\Admin\AppData\Local\Temp\aec58061129c62ca4be315d7d758162c.exe"2⤵
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2496-133-0x0000000000400000-0x000000000044E000-memory.dmp
memory/2496-134-0x0000000000400000-0x000000000044E000-memory.dmp
memory/2496-135-0x0000000000400000-0x000000000044E000-memory.dmp
memory/2496-138-0x0000000000400000-0x000000000044E000-memory.dmp
memory/2496-139-0x0000000004DA0000-0x0000000005344000-memory.dmp
memory/2496-140-0x0000000005350000-0x0000000005968000-memory.dmp
memory/2496-141-0x0000000004C20000-0x0000000004D2A000-memory.dmp
memory/2496-142-0x00000000027B0000-0x00000000027C2000-memory.dmp
memory/2496-143-0x0000000004D30000-0x0000000004D6C000-memory.dmp
memory/2672-136-0x00000000005EE000-0x000000000061C000-memory.dmp
memory/2672-137-0x0000000000570000-0x00000000005BC000-memory.dmp