Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
07/11/2023, 14:15
General
-
Target
Camera/iacamera32/iacamera32.sys
-
Size
729KB
-
MD5
37c19545e1282a0af754d17c2b862bf5
-
SHA1
d5bf0217af004b890ef6eed290a2c642c5ed938e
-
SHA256
1096cf55a931cae4d044f35b4de031263468ca8e9fde9953d7333afa91d583f8
-
SHA512
c4e70b158acf90e4c2394b31cc4a4018fd59d42b4d23c1aaf835e971e111ddf4ab2e08d96e9231ff4d41b9db49bc04d00ccff50747fc535f0bd73ecd9a33108e
-
SSDEEP
12288:oG90LOdYqQ/Jrc4YgLSM88CN7NXzOoiOE0iZQW4icT2:oG90LOdGhrmcD5CN79zOolEFZPET2
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Camera\iacamera32\iacamera32.sys1⤵
-
C:\Users\Admin\AppData\Local\Temp\Camera\iacamera32\iacamera32.sysC:\Users\Admin\AppData\Local\Temp\Camera\iacamera32\iacamera32.sys2⤵
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5ccb971711760979402e285ad4ed1379f
SHA1014483d7611644971d4811ebf3cace3eefa3f625
SHA2560285e226ad4c252053bbf6794c16251d08908f487f8674e516423378f8855fd6
SHA512eef9d7eaede3c948045efde41fa08798c905224eb8d16803201a8b49bc9a2ae60982276f253dd2a13c8d34e2b73e2e962c18c059a6962ae77a88a87f436e821e
-
Filesize
880KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB