Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
03/11/2023, 20:20
General
-
Target
HXH5EUBoXAE2Cvcw
-
Size
29KB
-
MD5
119bf5bf86ed2c95f332fd8f4527d1cc
-
SHA1
002df13dca8291eda843a9c841be397e70ae2cc0
-
SHA256
672577d74be1f6e8a42f3b8e1808214e257443f6c6f35b00de842900fbec709b
-
SHA512
0024b9c908beb5e5b5023cd433e148861c8a809b8fae6585500dff5d432e7b3d0133fe44f31e9faafd45a237c208e974576f531dffd7646178e234a0d9895b33
-
SSDEEP
768:GKMTv6GbK+wGgEU3SRAD4or2iIw/IuXyKXweM:GKsvJbK+9zUkiPQlreM
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\HXH5EUBoXAE2Cvcw1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5890ad103f44f4d2c5ed7a16e9caea395
SHA105a53510cf6d19f943ad8150c523e0105a829ced
SHA256c828e970ee6fc1f912a5e64336edd82e354922b4f0e336ed456a0e98bab0f651
SHA51293c2cc970931d6d3ee477c1064176741116be4636acac21f3c8cfa43f272f0d554b062a690d631088ce27346251dc6041d4d040c8b4c7706cde8d34de2d194d5
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB