Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
30-09-2023 07:26
General
-
Target
c6cc477072623ffc2dec5314acd78815a6f2e024da148ff79bf2d1f2b3dea297.exe
-
Size
1.8MB
-
MD5
09bcb1cd397557657760e1e10e72c3bf
-
SHA1
6826460e8c48e4ebc5ebe320090d6720f95d2c23
-
SHA256
c6cc477072623ffc2dec5314acd78815a6f2e024da148ff79bf2d1f2b3dea297
-
SHA512
04f2e5a82fe1e54aa9bb80d4330a4acb147de86e84c25e83dda200776eaa2a627cfe6cf3a1b8f120360f7f731d680e6d57ff6327efc30636c84dd961d3fc7fb9
-
SSDEEP
24576:UJptrSpWtyl4xuxzacxc4kUWLpe/skSkHcQUTlq9B2ePqAN7M:U1rWWtym+Wc/sXQUTcB5J7M
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6cc477072623ffc2dec5314acd78815a6f2e024da148ff79bf2d1f2b3dea297.exe"C:\Users\Admin\AppData\Local\Temp\c6cc477072623ffc2dec5314acd78815a6f2e024da148ff79bf2d1f2b3dea297.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB