Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
30-10-2023 09:33
General
-
Target
1d3d190282bad5b368cd2b38542e08847c526c8723fd4d8604f25a88200f8616.exe
-
Size
619KB
-
MD5
24ac3caa621c171671adbce25932852b
-
SHA1
1c353acc525fd5c1beeddddae5775b757b684b9d
-
SHA256
1d3d190282bad5b368cd2b38542e08847c526c8723fd4d8604f25a88200f8616
-
SHA512
8d2c6b741ab45d6dfc1b4cf03a9ffa2995ac7b555115ae7fadff2ba3190cc96cf3ac0940b2b9aafeca03d69b6eec5307f228cd14804878add6e95d05fed2ad5f
-
SSDEEP
12288:9QQghIMHXLEE5Ye789nQCtJSSwfLIto2cKqUS:9QQrMH7EE5Ye789nQCtJS7fLuo2Bqr
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d3d190282bad5b368cd2b38542e08847c526c8723fd4d8604f25a88200f8616.exe"C:\Users\Admin\AppData\Local\Temp\1d3d190282bad5b368cd2b38542e08847c526c8723fd4d8604f25a88200f8616.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD56268217541def0a778c46cdd4f3be730
SHA16251bd2e5fd953cc0d9331b22949aa718ca00c6f
SHA256dd557a43bcd965d02118a108dfaf42a479a0174a48e8092ba7b3101baf02c603
SHA5129144c14ac5e407921804442f6bd82a8b252ee9818d904d0cf711ac95a66121943b272cdf881fbaf85f65bf0c6dad1b8baeaad8dfa640af8ebe1dcdb44216a827
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB