Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
05-11-2023 04:36
General
-
Target
8df837e0eaf225d626d7c1987a3d437b4e047665c525338c8e1ea460926b7bba.exe
-
Size
6KB
-
MD5
4437a31195b9b1c7efbb0adec8227bb7
-
SHA1
845163033f70e994b87518638d132190d4b200ea
-
SHA256
8df837e0eaf225d626d7c1987a3d437b4e047665c525338c8e1ea460926b7bba
-
SHA512
e648abd7aa1b352bc43ede998a68a04cbe8eb9a6ff2453c8cf83d43ea414593dc0df776412df04bf7d57f9779f624c14002b1a72f1d6b8e84110c973dc8d89f0
-
SSDEEP
48:SPbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9u5O:e0mIGnFc/38+N4ZHJWSY9FI5WqKx
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8df837e0eaf225d626d7c1987a3d437b4e047665c525338c8e1ea460926b7bba.exe"C:\Users\Admin\AppData\Local\Temp\8df837e0eaf225d626d7c1987a3d437b4e047665c525338c8e1ea460926b7bba.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5638302d1948f977c7f0c209af791a3dd
SHA1d6932f75cf5d8582a383743c66fa6268ce5b2837
SHA2562895386745b2106727e57fdd5e054d1644af3ade7ece5158259d2e14262b24c1
SHA512bc77d2087aa45eb23a90f065420a53fbbc9e1c272411bb70db2da5457c23efeb6ed61bafb05766d7805117a4c79ca492dd05e163a467ec5afcc1750f1e6d2d7c
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB