Analysis
-
max time kernel
1373s -
max time network
1165s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
28-09-2023 15:29
General
-
Target
1a428412d3273adae489011beee943b12fbb069b6e22015bf7849b722696a29a.zip
-
Size
1.3MB
-
MD5
bb4c4b04e48469c41642fccc94e64c24
-
SHA1
b6795b35d33786f06e9e202d182cf1a5cae0ec7e
-
SHA256
6ea43bea362695fdd8455719e14286f12811e9d5581ac062a135acf469490007
-
SHA512
4bdd8605d09aaa605b5717eba9c2809fe511a48e57f567edba341001432557c22c0a865e873066c69ab376d6c3fd30138305c957032fffaa4767c40f4ed5cdf0
-
SSDEEP
24576:mDRagjDbPMS9nWxLA6OLI4zhyqo87uJMgKNaVZClV2JEn8TmdCAQBgK:oPMSVGA6S5g+7uOPNaVmV2Jy8TmEJd
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\1a428412d3273adae489011beee943b12fbb069b6e22015bf7849b722696a29a.zip1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB