Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
04-10-2023 09:51
General
-
Target
54f860029e4ec454e6f64cd41b3b160072141c32798218ced1dc68f489681a1b.exe
-
Size
207KB
-
MD5
5c0c0a1c3fcaa54107ad0d9da58ac2eb
-
SHA1
00ec4989bad89f559e0deef9e684fcb8de86c0d1
-
SHA256
54f860029e4ec454e6f64cd41b3b160072141c32798218ced1dc68f489681a1b
-
SHA512
3ac26f821cb89900646d2e90377048129e555596a3d9823096fb978f4c224900e4dd12a3c8755eb5154e2939aa9334d8f900b4a58be996719a9ec0f9108f3d01
-
SSDEEP
768:MPSt1TO48V+9oR0jokw8m2o2WlRYNERD+3B9kDfKoyf23U6ntn8udy17uHfHaH5b:p1h88oRHoYl0ERDKNoyfcUMdy
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\54f860029e4ec454e6f64cd41b3b160072141c32798218ced1dc68f489681a1b.exe"C:\Users\Admin\AppData\Local\Temp\54f860029e4ec454e6f64cd41b3b160072141c32798218ced1dc68f489681a1b.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB