Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09/10/2023, 15:28
General
-
Target
a0ce3ef63faecafd27f6b3e465ed6c7515502ef202ac09049bfbebc1f1c2c853.exe
-
Size
664KB
-
MD5
c68e0c17d6548413f4da60d8ac4e7f69
-
SHA1
20baa6aea74fbd09d02a05c961ecf263354bd552
-
SHA256
a0ce3ef63faecafd27f6b3e465ed6c7515502ef202ac09049bfbebc1f1c2c853
-
SHA512
cb6f70e9b73625e9a823dac4b0675dd1aaf99db9a6acac24b22d337837253b5fe74416502d0e53d3c1e862056698e4db3a20a99ebcd7a026990808e1c1b2fbc9
-
SSDEEP
12288:/lDQcUFp7JJ7bmB+uV/q7orS3tHdgMg/DsuRfejPU:dje7b76B+uVsorOtHGMgoAmjPU
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0ce3ef63faecafd27f6b3e465ed6c7515502ef202ac09049bfbebc1f1c2c853.exe"C:\Users\Admin\AppData\Local\Temp\a0ce3ef63faecafd27f6b3e465ed6c7515502ef202ac09049bfbebc1f1c2c853.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB