Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16/11/2023, 02:00
General
-
Target
BSTweaker5/DLLs/Microsoft.Threading.Tasks.Extensions.Desktop.dll
-
Size
46KB
-
MD5
e548a93d16964e52868c47cef1c98f2e
-
SHA1
4b96b0aa48f6ac050a764c7d65f4129a9bb8cf21
-
SHA256
f71621c47c610e0886846cf53d955fd0e7448951f99ecc22facd47493ef97a87
-
SHA512
fd1377b5d2d792eccf2ab9a01529838f178126fd6748da8e27cbc908ea83813fb4de021aa88989186459fef1c11be76aaf8b29b2291203d5f34f98361acf77ab
-
SSDEEP
768:bsoKLggFUyETHj0Y5m64r+B6yP5wwWGZ8iJvHWrI:DKUgSyyD0Y5tVwwlZ8AWrI
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BSTweaker5\DLLs\Microsoft.Threading.Tasks.Extensions.Desktop.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5682c2d1d05088d5e941d1ead175c0f35
SHA1d15efbc56966f02b01b179f00c431ae2c9c4e70f
SHA256e2305d0bc4975bdc19e2488438b6879e5251f96491b4936c819b5c703eb33773
SHA5127f764250def8e866cd0b692507ca9af11c25bd239eaba33a1d3960aeb429d6efdd90a6f27d3d29fa90f26e05b3e735490aca1c510938c669d4913cdea5bfc174
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB