Analysis
-
max time kernel
149s -
max time network
162s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 07:00
General
-
Target
Ycswddp.exe
-
Size
596KB
-
MD5
6beb7b485fcf483ad365e2eb794ab3d5
-
SHA1
b0235b5da86bbf6bb75164bb65cc1e4a5720ae49
-
SHA256
95c601597e0c5cc6ed9b77c20993bb1509dd263184c037dede3be4c32f57f3cd
-
SHA512
413ffcbdc25c9518334ccf6b09c6513192b3746045166e639ba3f42d74213115592ac5c6adcbec91f26d2d3f757aeb807719666849c3e5ecf81bc0155de933c6
-
SSDEEP
12288:H3oUqg29l6BHYfS3WkPayWwXr2x9tjXoD84xeuPAV3Fr0oYiNv:YGJ3WU+7tztV3Fr0Fu
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Ycswddp.exe"C:\Users\Admin\AppData\Local\Temp\Ycswddp.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
616KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
56KB
-
Filesize
9.9MB