Analysis
- max time kernel
148s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
- submitted
05/09/2023, 02:37
General
- Target 1c00c8e24fa814e9741571c74df2f71f.exe
- Size 658KB
- Sample230905-c4jf6adb68
- SHA256 8625ed4acd5cb983bad7b6809a517c3525497a72c6b87442e10410c0c02f723a
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs
- Suspicious use of AdjustPrivilegeToken 29 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c00c8e24fa814e9741571c74df2f71f.exe"C:\Users\Admin\AppData\Local\Temp\1c00c8e24fa814e9741571c74df2f71f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4660-0-0x0000000000B30000-0x0000000000BDA000-memory.dmp
memory/4660-1-0x0000000074EC0000-0x0000000075670000-memory.dmp
memory/4660-2-0x0000000074EC0000-0x0000000075670000-memory.dmp
memory/4660-3-0x0000000005720000-0x0000000005730000-memory.dmp
memory/4660-5-0x0000000005720000-0x0000000005730000-memory.dmp
memory/4660-7-0x0000000006050000-0x00000000060EC000-memory.dmp
memory/4660-8-0x00000000066A0000-0x0000000006C44000-memory.dmp
memory/4660-9-0x0000000006290000-0x0000000006322000-memory.dmp
memory/4660-10-0x0000000006250000-0x000000000625A000-memory.dmp
memory/4660-11-0x00000000064F0000-0x0000000006556000-memory.dmp