Analysis
- max time kernel
149s - max time network
153s - platform
windows7_x64 - resource
win7-20230831-en - resource tags
- submitted
02/10/2023, 12:49
General
- Target Quote 509241708.exe
- Size 5KB
- Sample231002-p2cbaace38
- SHA256 0331ca586f68e8a853e9030635f249dba8337da5ef7c29521c373807fcce1a6f
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Quote 509241708.exe"C:\Users\Admin\AppData\Local\Temp\Quote 509241708.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2484-0-0x0000000000EE0000-0x0000000000EE8000-memory.dmp
memory/2484-1-0x0000000074230000-0x000000007491E000-memory.dmp
memory/2484-2-0x0000000004E00000-0x0000000004E40000-memory.dmp
memory/2484-3-0x0000000074230000-0x000000007491E000-memory.dmp
memory/2484-4-0x0000000004E00000-0x0000000004E40000-memory.dmp