Analysis
- max time kernel
142s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
10/10/2023, 11:12
General
- Target 541cb2798171e84f4a88b09bb24de5aa.exe
- Size 2.4MB
- Sample231010-nav4msda4t
- SHA256 54a730e5183a57a65dc6fa64170a3d75fa870677fb54d563b3b867a2d6208548
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 13 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe"C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exeC:\Users\Admin\AppData\Local\Temp\541cb2798171e84f4a88b09bb24de5aa.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2148-6-0x00000000064A0000-0x0000000006A44000-memory.dmp
memory/2148-1-0x0000000075390000-0x0000000075B40000-memory.dmp
memory/2148-2-0x0000000005A70000-0x0000000005A80000-memory.dmp
memory/2148-3-0x0000000005AF0000-0x0000000005C06000-memory.dmp
memory/2148-4-0x0000000005D50000-0x0000000005E56000-memory.dmp
memory/2148-5-0x0000000005E60000-0x0000000005EAC000-memory.dmp
memory/2148-0-0x0000000000FE0000-0x000000000125A000-memory.dmp
memory/2148-11-0x0000000075390000-0x0000000075B40000-memory.dmp
memory/2236-7-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2236-9-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2236-10-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2236-12-0x0000000000400000-0x000000000056E000-memory.dmp
memory/2236-13-0x0000000000400000-0x000000000056E000-memory.dmp