Analysis
- max time kernel
1372s - max time network
1167s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
24/09/2023, 11:39
General
- Target ⥪⮢ 㬥.txt
- Size 58B
- Sample230924-nscd9aff34
- SHA256 3b1cd24f46f68e3a5982bdb8c1391988ac747a6cf66b8af32098882e8ede20eb
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\ ⥪⮢ 㬥.txt"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/488-0-0x000001CAAA470000-0x000001CAAA480000-memory.dmp
memory/488-16-0x000001CAAA570000-0x000001CAAA580000-memory.dmp
memory/488-32-0x000001CAB28E0000-0x000001CAB28E1000-memory.dmp
memory/488-34-0x000001CAB2910000-0x000001CAB2911000-memory.dmp
memory/488-35-0x000001CAB2910000-0x000001CAB2911000-memory.dmp
memory/488-36-0x000001CAB2A20000-0x000001CAB2A21000-memory.dmp