Analysis
- max time kernel
151s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
11/10/2023, 21:10
General
- Target fe303e7d1df7ec8f21c5a050d70f5e21868b1b2dfcbfe8760e74019c845df86d.exe
- Size 1.6MB
- Sample231011-zz7phsfc78
- SHA256 fe303e7d1df7ec8f21c5a050d70f5e21868b1b2dfcbfe8760e74019c845df86d
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe303e7d1df7ec8f21c5a050d70f5e21868b1b2dfcbfe8760e74019c845df86d.exe"C:\Users\Admin\AppData\Local\Temp\fe303e7d1df7ec8f21c5a050d70f5e21868b1b2dfcbfe8760e74019c845df86d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4176-0-0x00007FF9A5D80000-0x00007FF9A6841000-memory.dmp
memory/4176-1-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-3-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-2-0x0000018138D70000-0x0000018138DA4000-memory.dmp
memory/4176-4-0x00007FF9A5D80000-0x00007FF9A6841000-memory.dmp
memory/4176-5-0x0000018151830000-0x00000181518CA000-memory.dmp
memory/4176-6-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-7-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-8-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-9-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-10-0x0000018155460000-0x0000018155468000-memory.dmp
memory/4176-12-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-13-0x0000018155AF0000-0x0000018155B28000-memory.dmp
memory/4176-14-0x00000181556A0000-0x00000181556AE000-memory.dmp
memory/4176-15-0x0000018151820000-0x0000018151830000-memory.dmp
memory/4176-17-0x0000018151830000-0x00000181518CA000-memory.dmp
memory/4176-18-0x00007FF9A5D80000-0x00007FF9A6841000-memory.dmp