Analysis
- max time kernel
147s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
12/07/2023, 18:25
General
- Target 307328a2a382c7667df5c2d974054cf6.exe
- Size 1.2MB
- Sample230712-w2lnaaec87
- SHA256 565f27efbfaabc879f74e800abdb63f4ad46d49b654927a551a8a6cd17be5ac1
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 9 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\307328a2a382c7667df5c2d974054cf6.exe"C:\Users\Admin\AppData\Local\Temp\307328a2a382c7667df5c2d974054cf6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2468-133-0x000002C098950000-0x000002C09896C000-memory.dmp
memory/2468-134-0x000002C098BB0000-0x000002C098BC0000-memory.dmp
memory/2468-135-0x000002C098BB0000-0x000002C098BC0000-memory.dmp
memory/2468-136-0x000002C098BB0000-0x000002C098BC0000-memory.dmp
memory/2468-138-0x000002C098BB0000-0x000002C098BC0000-memory.dmp
memory/2468-139-0x000002C098BB0000-0x000002C098BC0000-memory.dmp
memory/2468-140-0x000002C098BB0000-0x000002C098BC0000-memory.dmp