aa117305eace5176e87ec38c2e8492693cb85146d97e84b832de9ab04353cfb8

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
07-06-2023 02:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Size

32KB
MD5

8a1b87eb807e29e30acf1b14c966a195
SHA1

7844dfd9bd26da45b7314a741cb6a123d0777d39
SHA256

da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520
SHA512

bbb04dc3651738478c778231f0220dd122a687fee238c2cd9142a36563df1e1b2943b4e6fabef842fc657a5386d258b76fcd39396cc4699e42c30feaca84bb93
SSDEEP

384:H0bUe5XB4e0XGOzT3pixEpfHWT6tTUFQqzFmObb2:MT9BuVv3piecb2

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 37 IoCs

Processes:

da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe

description	pid	process
Token: SeDebugPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: 33	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Token: SeIncBasePriorityPrivilege	4764	da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe

C:\Users\Admin\AppData\Local\Temp\da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
"C:\Users\Admin\AppData\Local\Temp\da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4764-133-0x0000000001150000-0x0000000001160000-memory.dmp

Filesize
64KB

Download
memory/4764-134-0x0000000001150000-0x0000000001160000-memory.dmp

Filesize
64KB

Download