Analysis
-
max time kernel
139s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07-10-2023 16:10
General
-
Target
Aspect/ICSharpCode.AvalonEdit.dll
-
Size
598KB
-
MD5
b6142f182a86adf382ea845935a327bc
-
SHA1
841367a389b4df1207224a26f9e201e593d551d1
-
SHA256
7225253a9ca59db879340f9ea8ee4f48006ceadf878d04b446522007fbe3ebb3
-
SHA512
a5e4941409b4b06fdf44ec5ebfb5d99cec47b1f348e266e7dc20254e5465deb1abf60d67092b5aa1bd14f52d637b52b380382f838d601b0f3734ea5a406fb068
-
SSDEEP
6144:m7zJDqOpyhu6XzDnHYRdioOfP/5GvVTBz/xz0z77OxRmvdM+lNsjXU+9NKsTLO0l:C/9R9VONf
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Aspect\ICSharpCode.AvalonEdit.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD55d8eea9d2ea43e7e5710bf34d8eb443d
SHA188cf9c6b4d4f96a02cf85c135b567adced6eddd5
SHA2567787c4ef19dd88170e26dd995632a2a2f96a65da8f66b33d23fb41a1387091da
SHA51272ff03d3a7406fa729fd05ff6507734d78de7e743b71b6a59b006ab513663aa04df676981f621bb0c19a11a22e67e3b555e5fad8dc62ef1e9e75ccaca7b37dd3
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB