Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
31/10/2023, 20:27
General
-
Target
c0ada6395e72427ea611184787b47a32722baa8a732d02d2f02633a5c0ee8651.dll
-
Size
1.2MB
-
MD5
f5df2a4ec3becd41cc2beb7c31bfc5ea
-
SHA1
957bd7c1cb8d0c753faef7c2afdc3a63948ea004
-
SHA256
c0ada6395e72427ea611184787b47a32722baa8a732d02d2f02633a5c0ee8651
-
SHA512
9b8c8b2403a1f68aa56cd1578f4ec7b2c62624e175b129bd248f616b654c2034df0402af77fe984fef25fe914d49b10fbddc880c662020d407901c8bcbe0688f
-
SSDEEP
24576:jrZcCgifLC5yVOlFG1/V4WDfa+xtvzRCpZ9Vw7niWOGw:eS52+NG5
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c0ada6395e72427ea611184787b47a32722baa8a732d02d2f02633a5c0ee8651.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB