Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-02-2023 03:36

General

  • Target

    420c65eb0e0f1e046c4587fbb9d10ea3eaa4fe508454d7b787a33e06683cf690.exe

  • Size

    275KB

  • MD5

    4a8fcd36a07717eef5e5eb9a5032fbb7

  • SHA1

    d4d7e6506214d8290d91150b9cfa27d2416839e5

  • SHA256

    420c65eb0e0f1e046c4587fbb9d10ea3eaa4fe508454d7b787a33e06683cf690

  • SHA512

    6b23a09844183c58ec63ad456c2cf2ac2f9661154d32d04b380a18d2698121782a517e18106e54a71fa3a674227079e416d39de5604cb481db1fe4ed83630d34

  • SSDEEP

    3072:Om7GkmL35XqwYZpyKRl7uanBGG4q4Ds4+KkOzpXpBFaoaxvPIG3:OjLBFYPbuanYG4pD+szp5BdWvAi

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\420c65eb0e0f1e046c4587fbb9d10ea3eaa4fe508454d7b787a33e06683cf690.exe
    "C:\Users\Admin\AppData\Local\Temp\420c65eb0e0f1e046c4587fbb9d10ea3eaa4fe508454d7b787a33e06683cf690.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1980-132-0x0000000000A0E000-0x0000000000A3B000-memory.dmp

    Filesize

    180KB

  • memory/1980-133-0x00000000024D0000-0x0000000002532000-memory.dmp

    Filesize

    392KB

  • memory/1980-134-0x0000000000400000-0x00000000007A0000-memory.dmp

    Filesize

    3.6MB

  • memory/1980-135-0x0000000005170000-0x0000000005714000-memory.dmp

    Filesize

    5.6MB

  • memory/1980-136-0x0000000005720000-0x0000000005D38000-memory.dmp

    Filesize

    6.1MB

  • memory/1980-137-0x0000000002B80000-0x0000000002B92000-memory.dmp

    Filesize

    72KB

  • memory/1980-138-0x0000000005040000-0x000000000514A000-memory.dmp

    Filesize

    1.0MB

  • memory/1980-139-0x0000000002BA0000-0x0000000002BDC000-memory.dmp

    Filesize

    240KB

  • memory/1980-140-0x0000000000A0E000-0x0000000000A3B000-memory.dmp

    Filesize

    180KB