Analysis
-
max time kernel
148s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
03-11-2023 20:20
General
-
Target
kMIDNKxacjT6JIO6
-
Size
35KB
-
MD5
38bc3676ad82aaa1fc535c05967703bc
-
SHA1
ac10de2229566c1521e2338bdc2a39cd772f3f18
-
SHA256
89eb6fa733fafa6a042099a9b9356b100a7555c4c84c939cbafef6ddc62126a7
-
SHA512
97dbf93e5efc528e90fd746c4980cde621a550ee9aa628480673e9d5639db03d2820693b73bed723fa51b2acab848328c8e7418d34eebd41fb83e8dee2aeb745
-
SSDEEP
768:nMXm2VuBfMawaxYMXQ6634dmEDJyhFeO1JOdwKsW1fEXUiY6PAmwYtLsRE5Oy2:MXTsVCF6mEdjq4Hn1sXJlom/LAy2
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\kMIDNKxacjT6JIO61⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5a83c197e432564f9541628ba3eada283
SHA1586e79d34b70d08edd952b399c6a08995279708f
SHA25634f5b9d93e8dcb5bac17aa110a9a9f1a69c2cf9aa55bd4cef6169e0f93a39a21
SHA5120fdb71e0d3648d7de3384cef490a6f68b83624e265c798fe9a26b1a6b5b9965d493835db43f1c33885bfbbee3a4c1fccf027ef5c935c97a4e6c61709015823ba
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB