Analysis
- max time kernel
137s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
11/10/2023, 10:51
General
- Target 55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe
- Size 1.7MB
- Sample231011-mx2n9sbf28
- SHA256 55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe"C:\Users\Admin\AppData\Local\Temp\55527507b7a4380ed6cd1cd7e3ebf6a3f3c1acdf263760f85d986b98c90cd8a6.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3904-0-0x0000026928370000-0x00000269283A4000-memory.dmp
memory/3904-1-0x00007FFDA1540000-0x00007FFDA2001000-memory.dmp
memory/3904-2-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-3-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-4-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-5-0x00007FFDA1540000-0x00007FFDA2001000-memory.dmp
memory/3904-7-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-6-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-8-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-9-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-10-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-11-0x00000269449C0000-0x00000269449C8000-memory.dmp
memory/3904-12-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-13-0x0000026945040000-0x0000026945078000-memory.dmp
memory/3904-14-0x0000026945000000-0x000002694500E000-memory.dmp
memory/3904-15-0x0000026940DD0000-0x0000026940DE0000-memory.dmp
memory/3904-17-0x00007FFDA1540000-0x00007FFDA2001000-memory.dmp