Analysis
- max time kernel
139s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
11/10/2023, 19:56
General
- Target 79c251c4440edcb58f71c36ec9da4bc7a09f957a18906aecff0935a19e6329b1.exe
- Size 1.3MB
- Sample231011-ynqq7aaa3s
- SHA256 79c251c4440edcb58f71c36ec9da4bc7a09f957a18906aecff0935a19e6329b1
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\79c251c4440edcb58f71c36ec9da4bc7a09f957a18906aecff0935a19e6329b1.exe"C:\Users\Admin\AppData\Local\Temp\79c251c4440edcb58f71c36ec9da4bc7a09f957a18906aecff0935a19e6329b1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4340-0-0x0000029BF0720000-0x0000029BF075E000-memory.dmp
memory/4340-1-0x00007FFA62950000-0x00007FFA63411000-memory.dmp
memory/4340-3-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-2-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-4-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-5-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-6-0x00007FFA62950000-0x00007FFA63411000-memory.dmp
memory/4340-7-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-8-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp
memory/4340-9-0x0000029BF0D60000-0x0000029BF0D70000-memory.dmp