Analysis
- max time kernel
151s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
14/10/2023, 05:57
General
- Target b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c.exe
- Size 1.7MB
- Sample231014-gnsr4sad23
- SHA256 b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c.exe"C:\Users\Admin\AppData\Local\Temp\b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2140-0-0x00000231A6820000-0x00000231A6854000-memory.dmp
memory/2140-1-0x00007FFC58F60000-0x00007FFC59A21000-memory.dmp
memory/2140-2-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-3-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-4-0x00007FFC58F60000-0x00007FFC59A21000-memory.dmp
memory/2140-5-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-6-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-7-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-8-0x00000231C0CA0000-0x00000231C0CA8000-memory.dmp
memory/2140-9-0x00000231C0F30000-0x00000231C0F68000-memory.dmp
memory/2140-10-0x00000231C0CC0000-0x00000231C0CCE000-memory.dmp
memory/2140-11-0x00000231A6C30000-0x00000231A6C40000-memory.dmp
memory/2140-13-0x00007FFC58F60000-0x00007FFC59A21000-memory.dmp