Analysis
- max time kernel
142s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
24/09/2023, 00:04
General
- Target b20b3a1d55a2018fba17d584a50e0713e05a391efe4651b3a6235df99dfbc4fb.exe
- Size 4.5MB
- Sample230924-acwlascf57
- SHA256 b20b3a1d55a2018fba17d584a50e0713e05a391efe4651b3a6235df99dfbc4fb
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b20b3a1d55a2018fba17d584a50e0713e05a391efe4651b3a6235df99dfbc4fb.exe"C:\Users\Admin\AppData\Local\Temp\b20b3a1d55a2018fba17d584a50e0713e05a391efe4651b3a6235df99dfbc4fb.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3108-9-0x000001E7BA440000-0x000001E7BA450000-memory.dmp
memory/3108-25-0x000001E7BA540000-0x000001E7BA550000-memory.dmp
memory/3108-41-0x000001E7C28B0000-0x000001E7C28B1000-memory.dmp
memory/3108-43-0x000001E7C28E0000-0x000001E7C28E1000-memory.dmp
memory/3108-44-0x000001E7C28E0000-0x000001E7C28E1000-memory.dmp
memory/3108-45-0x000001E7C29F0000-0x000001E7C29F1000-memory.dmp
memory/4832-0-0x0000000010000000-0x0000000010616000-memory.dmp
memory/4832-6-0x0000000010000000-0x0000000010616000-memory.dmp