Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
03-11-2023 20:20
General
-
Target
Mke1F52D8MOnAE6L
-
Size
24KB
-
MD5
e1681b946e808071f1c8dcd49c2ff706
-
SHA1
6288aa2ba11840a5532fee615b7af84fe9249eaa
-
SHA256
bf36f8c9c293a20734e15221d730f129ab91725c5a92612c9e56fe1bdcb83d6a
-
SHA512
aaa37375a82829a9769692c67da1d584fda076eb636f6ab77639e447a50b1ba491f6c44c63f7d39c20d155dda9edf95fe389f8a26ec2c3333abbf32fd0d0eb8d
-
SSDEEP
768:oajIbubYjn5Y1X4VG/8c2ZRZXtAyPmjYM8l:hI6EK1XLK/Vmjv4
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Mke1F52D8MOnAE6L1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB