Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-06-2023 15:11
General
-
Target
dff2cf279301edf6166a5f144b93922f245bbfe58030e0633497f4271f6a763f.exe
-
Size
2.0MB
-
MD5
9bd3537fdb009ed4049bf505f28c000c
-
SHA1
a73737a5ac8b16ebe0fc1037bfdcfe22812e724f
-
SHA256
dff2cf279301edf6166a5f144b93922f245bbfe58030e0633497f4271f6a763f
-
SHA512
f54959938255df2db61361a4cd552b48dc11710ec91305c74469363c7d6287a736a0162bb7750afa6b4b712b417d0fd19c8e2c4bf9e7674a3f46b46e5c5b9386
-
SSDEEP
49152:rqg07TdlgvDugLv10D1Xt+sv2m8nFJAh+lParE:ilgIt+sv2mJ0CI
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dff2cf279301edf6166a5f144b93922f245bbfe58030e0633497f4271f6a763f.exe"C:\Users\Admin\AppData\Local\Temp\dff2cf279301edf6166a5f144b93922f245bbfe58030e0633497f4271f6a763f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2076-133-0x000001E7ED650000-0x000001E7ED666000-memory.dmpFilesize
88KB
-
memory/2076-134-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB
-
memory/2076-135-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB
-
memory/2076-136-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB
-
memory/2076-137-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB
-
memory/2076-138-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB
-
memory/2076-139-0x000001E7EEF30000-0x000001E7EEF40000-memory.dmpFilesize
64KB