Analysis
-
max time kernel
28s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
25-02-2023 14:13
General
-
Target
FrostyModManager.exe
-
Size
506KB
-
MD5
ce2e89ab7ba7e003af3feb74ec0d1a20
-
SHA1
6861071664db9fd994d6c4bbddb5e2be192a9e98
-
SHA256
8fcdb7659bc77b23f374e6eb89427c8dda7727a25c8a8bca3bdf494fd1c801db
-
SHA512
9044e40e37c37d1ffac9890d7bf1a7093c8043231fd49945d38beee849b26cdccd2c20e3d7af6d2bd096e125776b1b8a28dad385eb468bf49d0edb6d7c74710c
-
SSDEEP
3072:8+Uv+M/88jAku6tIUpoHopGg1DSnACXdS2YUFsviH8zQq/fgSR0pm/fOiC5c2r:VUvpBOE1OnHXYUsaH8zf/ISR0pm/Gy2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe"C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/932-54-0x000000013F2A0000-0x000000013F324000-memory.dmpFilesize
528KB
-
memory/932-55-0x000000001BA80000-0x000000001C06E000-memory.dmpFilesize
5.9MB
-
memory/932-56-0x000000001CFC0000-0x000000001D252000-memory.dmpFilesize
2.6MB
-
memory/932-57-0x0000000000810000-0x0000000000832000-memory.dmpFilesize
136KB
-
memory/932-58-0x0000000000570000-0x000000000058C000-memory.dmpFilesize
112KB
-
memory/932-59-0x0000000000150000-0x000000000015E000-memory.dmpFilesize
56KB
-
memory/932-60-0x0000000000850000-0x0000000000858000-memory.dmpFilesize
32KB
-
memory/932-62-0x0000000000960000-0x000000000097A000-memory.dmpFilesize
104KB
-
memory/932-61-0x0000000002390000-0x00000000023D2000-memory.dmpFilesize
264KB
-
memory/932-63-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB
-
memory/932-64-0x000000001B940000-0x000000001B9F0000-memory.dmpFilesize
704KB
-
memory/932-65-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB
-
memory/932-66-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB
-
memory/932-69-0x0000000000A30000-0x0000000000A3A000-memory.dmpFilesize
40KB
-
memory/932-73-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB
-
memory/932-74-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB
-
memory/932-75-0x000000001D6E0000-0x000000001D760000-memory.dmpFilesize
512KB