Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
20/07/2023, 18:12
General
-
Target
sihost64.exe
-
Size
8KB
-
MD5
efff024f5024a44cd78849a0d5bcfebf
-
SHA1
465df43502a67b6cf96bf4f83f59ec5aa1055869
-
SHA256
5656db6dde4162c87a1784aded93fbc68198a8ca97fb9fba50fa77fd5266ea45
-
SHA512
26f806bd61c94f774695bd13505de8b1f72390e3d23026e9b15a0cb5e75c4faa50279716e9e58d697a322432a391dea24c0ae41d4a68eedca3036fc8987ddbd1
-
SSDEEP
96:d6Ac5w59LKYnN792+s9xCYl8ao3dKrtdDFTIoDsIPWwOgzNt:oAF5HF92+sLD854tu4Wu
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sihost64.exe"C:\Users\Admin\AppData\Local\Temp\sihost64.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5ac42f405eb4ea5835eff0acaf0345f6c
SHA162c8234eb5f905b852b0aa0d09bb6b0722dea1a2
SHA2569d63a6d62fed36cab37127737ad3ba198be925a50aa96a7cb831a6add3601ee4
SHA512d7983bb2fc43a6341cf6ab87092364bf2a5bb76d71472bf31b1e0e0bfc38c2bf3ed4bdb85b56b9e6f7117fa1284c32fcd7d2f069924321257cfb1b625c2b9553
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB