Analysis
- max time kernel
119s - max time network
123s - platform
windows7_x64 - resource
win7-20230831-en - resource tags
- submitted
10/10/2023, 11:12
General
- Target 541cb2798171e84f4a88b09bb24de5aa.exe
- Size 2.4MB
- Sample231010-nav4msda4t
- SHA256 54a730e5183a57a65dc6fa64170a3d75fa870677fb54d563b3b867a2d6208548
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 14 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe"C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exeC:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2576-17-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-14-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-22-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-21-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-20-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-7-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-6-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-8-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-9-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-15-0x000000007EFDE000-0x000000007EFDF000-memory.dmp
memory/2576-13-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-11-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2576-10-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2692-5-0x0000000000670000-0x00000000006BC000-memory.dmp
memory/2692-0-0x0000000073F80000-0x000000007466E000-memory.dmp
memory/2692-1-0x0000000000800000-0x0000000000A7A000-memory.dmp
memory/2692-19-0x0000000073F80000-0x000000007466E000-memory.dmp
memory/2692-4-0x00000000051F0000-0x00000000052F6000-memory.dmp
memory/2692-3-0x0000000004430000-0x0000000004546000-memory.dmp
memory/2692-2-0x0000000004F40000-0x0000000004F80000-memory.dmp