Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
06-10-2023 17:17
General
-
Target
email-html-2.txt
-
Size
8KB
-
MD5
6fa8e1c5d461404671601342921bfdc4
-
SHA1
7209f2cd0bf2ef4ff7f642e63bba26e7b08cadd6
-
SHA256
84a20b968c2603ae8e6b32a0b0d58698e3b7ed85c7efc21225d3e3646b76917e
-
SHA512
096e442ebaf4ec73f1bfafd55e3038d219dc0aa0a83d683c4848cf2dc95f1cb03ac77d91fd004df9a9c684a03b844cae5674414923806429b71eff3dd4a60376
-
SSDEEP
192:OCwZ7aVA45BbUVMYi+tTtuuTYnmvD34PKMYi+tTtuuTYnmJ:OCwZHkBbU5i+PuFmvbXi+PuFmJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\email-html-2.txt1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB