Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
02-10-2023 13:08
General
-
Target
5671b3a89c0e88a9bfb0bd5bc434fa5245578becfdeb284f4796f65eecbd6f15.dll
-
Size
116KB
-
MD5
64f47ce2f7528b48c6cc9cddc1f48fa3
-
SHA1
7f728d490ed6ea64a7644049914a7f2a0e563969
-
SHA256
5671b3a89c0e88a9bfb0bd5bc434fa5245578becfdeb284f4796f65eecbd6f15
-
SHA512
e60552ba72e35a74e305457ed6da3210b2eaf52af0746c8717b2ccd5f9e36a5d4a994e2fe12e96fba32a78e9a1030c8bcd553806a28bf606cb39663cc7c575d0
-
SSDEEP
1536:FVVRPYgwC7j0fwUiUiKr+im6aQlteLcDoTG+vegpPu19JIhV7UFhnVE8WmK+ZFvU:3lUkKrO4DoTG+IZHn28VJjs5CuXbNdb
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5671b3a89c0e88a9bfb0bd5bc434fa5245578becfdeb284f4796f65eecbd6f15.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB