Analysis
-
max time kernel
141s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
03-09-2023 01:32
General
-
Target
Config/Plugins/FrogPlugins_Pcn7FMvReAsVWfCQBfRJCw/Plugin.amd64.dll
-
Size
173KB
-
MD5
67cbf66af892412815d9dd6fc52b693a
-
SHA1
43ec528d75512b5de9a43fa25e0aea93c0076dea
-
SHA256
ebeb04f9a468a5adff17d994fca64879956c308766d7395a6631764079bfd6b1
-
SHA512
4a3d548788faf2c35ca907d8cd783067bd9ec1bd94093eab539f20612e92ce2f7381e6000b7a2c090a5daac7ef2775b9aa0e79810099cdeab9fae1effddf892e
-
SSDEEP
1536:NcEjFtC6WN7ulqCoEf62N4VV42x0FMjb8nd1FL8GDQagUfiDfmIvizmIpL6:NFjBILEfXeeIqMHm1Rb8agUKDfHIp
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Config\Plugins\FrogPlugins_Pcn7FMvReAsVWfCQBfRJCw\Plugin.amd64.dll,#11⤵
- Suspicious use of AdjustPrivilegeToken