Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
03-10-2023 22:47
General
-
Target
fc6618113a61357e5923cee665d5a19467b05c579995f9de03c83ddd0e33b0ad.exe
-
Size
997KB
-
MD5
3477dd5e2037894c9d05e806edd1cae5
-
SHA1
6689d1d1bef1eb88d68dd0f1a1b1441254d6b012
-
SHA256
fc6618113a61357e5923cee665d5a19467b05c579995f9de03c83ddd0e33b0ad
-
SHA512
0ccb999a2e0bb010507de06646e07a062da87d9a59dd3988242941aed5e4bddc1866ce7aa4f57823204a3bd84f03cc8db25436b3c83b4cba6d3f60464aa6de82
-
SSDEEP
12288:sa9uR4ZvT0AGM7vAUpEU3M+2ZYnIlktSxi1/3:saYiPAszzIlkSxA/3
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc6618113a61357e5923cee665d5a19467b05c579995f9de03c83ddd0e33b0ad.exe"C:\Users\Admin\AppData\Local\Temp\fc6618113a61357e5923cee665d5a19467b05c579995f9de03c83ddd0e33b0ad.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD54770be11384ca2e302f1cf61155f2be1
SHA11614d07622483d680015f403cd2611f80657be02
SHA256ce62feac34c4dd45c09a611d76986b52da73785d13704274073c6bef81f3ad27
SHA512694e4bfc8835f1c7b3337dd720d9aadb41ed29bccc9f282c8ff26a766a39b337a6b691025af29c712227d93d5e4d66e146737880d14ed8ee2a3582465ee44416
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB