Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
02-10-2023 17:44
General
-
Target
584-325-0x0000000003A10000-0x0000000003B41000-memory.dll
-
Size
1.2MB
-
MD5
7525dfb5d2e39b5db26a126b3908994b
-
SHA1
00660794d5ec321d3c8e26ff5f9096154886277e
-
SHA256
65bea5f39f1191516f83627161cb38f01f310d546e45caaaa9a94b2c5bc558cd
-
SHA512
f95148f2c3b7449853f3cfef7c0dff4f70c0b7fa04d17badba936810ee1b1085f5bbb1188429c96ffac9c03b5b9e7ad36a4ab7b6d802220ce3cbc59b8f4c65b1
-
SSDEEP
24576:3C7CI9TZDEWk1wCy0zaG9cQA01ftxmbfYQJZKr0Y:7I99DEWVtQA0Zmn0Q
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\584-325-0x0000000003A10000-0x0000000003B41000-memory.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB