Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
16-11-2023 02:00
General
-
Target
BSTweaker5/DLLs/System.Runtime.dll
-
Size
21KB
-
MD5
8e4e0ea396b5452bed54e6888cb07ca1
-
SHA1
1a7afcdd7f118b3ef8f1d9761fa71faeee16fd2c
-
SHA256
dfeab83e6a9555a6c18070c611d868e117fa2fef6f815da26e622feb2e610254
-
SHA512
e160570f598d5fdd637725a70595a7ddc247c20aed66c031ff9816142231c8ea58c69fef7f5eb8e10120e5e5ad68ececb1b584054832464046209c9e04cc1aae
-
SSDEEP
384:r+4185WiR/B0GftpBj4T+ILKHRN7YSlVQP/:sLgiWmYws
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BSTweaker5\DLLs\System.Runtime.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB