Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09-10-2023 22:42
General
-
Target
15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7.zip
-
Size
647KB
-
MD5
5ca6a9255f572d79acde3a20a3578473
-
SHA1
7e4c79d060ff45555c47a8c0f13e87a545c207e9
-
SHA256
b84cea4777322995e2cdbeb7e2031519330941358f3fad0ae403e48b36650eae
-
SHA512
e146fe494136c0317f4cef1d607039f08891d726447f17adc4302d6e82ba8c6b6bb5020b048385cd73339d6ecf8a5d53fb66b5659896ea83c04343b1aedeaeb9
-
SSDEEP
12288:0vtdSsePvWAmOznibtcheWc+ZI2aCJ2iPWBa//rIYtTveYdURn3BK7Ape8cOt/xB:AfSjPvWBOGbt6ehXEJbWQMYJveAUR3Bp
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7.zip1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB