Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
25-02-2023 14:13
General
-
Target
FrostyModManager.exe
-
Size
506KB
-
MD5
ce2e89ab7ba7e003af3feb74ec0d1a20
-
SHA1
6861071664db9fd994d6c4bbddb5e2be192a9e98
-
SHA256
8fcdb7659bc77b23f374e6eb89427c8dda7727a25c8a8bca3bdf494fd1c801db
-
SHA512
9044e40e37c37d1ffac9890d7bf1a7093c8043231fd49945d38beee849b26cdccd2c20e3d7af6d2bd096e125776b1b8a28dad385eb468bf49d0edb6d7c74710c
-
SSDEEP
3072:8+Uv+M/88jAku6tIUpoHopGg1DSnACXdS2YUFsviH8zQq/fgSR0pm/fOiC5c2r:VUvpBOE1OnHXYUsaH8zf/ISR0pm/Gy2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe"C:\Users\Admin\AppData\Local\Temp\FrostyModManager.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/836-133-0x00000273B2830000-0x00000273B28B4000-memory.dmpFilesize
528KB
-
memory/836-134-0x00000273CE3E0000-0x00000273CE9CE000-memory.dmpFilesize
5.9MB
-
memory/836-135-0x00000273CE090000-0x00000273CE322000-memory.dmpFilesize
2.6MB
-
memory/836-136-0x00000273B2E80000-0x00000273B2E9C000-memory.dmpFilesize
112KB
-
memory/836-137-0x00000273B2CC0000-0x00000273B2CCE000-memory.dmpFilesize
56KB
-
memory/836-138-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-139-0x00000273B2EA0000-0x00000273B2EA8000-memory.dmpFilesize
32KB
-
memory/836-140-0x00000273CCE70000-0x00000273CCEB2000-memory.dmpFilesize
264KB
-
memory/836-141-0x00000273B4610000-0x00000273B462A000-memory.dmpFilesize
104KB
-
memory/836-142-0x00000273CE9D0000-0x00000273CEA80000-memory.dmpFilesize
704KB
-
memory/836-143-0x00000273CCF20000-0x00000273CCF42000-memory.dmpFilesize
136KB
-
memory/836-146-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB
-
memory/836-147-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-148-0x00000273CE360000-0x00000273CE368000-memory.dmpFilesize
32KB
-
memory/836-152-0x00000273D12C0000-0x00000273D12F8000-memory.dmpFilesize
224KB
-
memory/836-153-0x00000273D1290000-0x00000273D129E000-memory.dmpFilesize
56KB
-
memory/836-154-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-155-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-156-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-157-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB
-
memory/836-158-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-159-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-160-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-161-0x00000273CCEE0000-0x00000273CCEF0000-memory.dmpFilesize
64KB
-
memory/836-162-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB
-
memory/836-166-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB
-
memory/836-168-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB
-
memory/836-172-0x00000273CDBF0000-0x00000273CDDE7000-memory.dmpFilesize
2.0MB