Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16-11-2023 08:42
General
-
Target
796a90f76bbad8e076084cf5a1a6db5c062917c8f962bb74e834d614d4b9dc13.exe
-
Size
149KB
-
MD5
8a63bdedec6d0c8d3ba9cd9767618f34
-
SHA1
9458e84ad079d45a8d437e4f3141863b0884c033
-
SHA256
796a90f76bbad8e076084cf5a1a6db5c062917c8f962bb74e834d614d4b9dc13
-
SHA512
1108c951ee9c01edee4ca11eeaa55865698a74432e4678a0b4314c7ffdbcc7ab0a46eee60c5c971eed16265833d51af5219c99cc95c8d44a1974fc8251735f89
-
SSDEEP
3072:L3A8KzSuUYeO/pLE0Cs3OLXf2H4G9liyynCLPj+LL5msgmZzPtasVJ5:LkzSyQ0K2mv5NGsVJ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\796a90f76bbad8e076084cf5a1a6db5c062917c8f962bb74e834d614d4b9dc13.exe"C:\Users\Admin\AppData\Local\Temp\796a90f76bbad8e076084cf5a1a6db5c062917c8f962bb74e834d614d4b9dc13.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5532156ce1f403404f83e02663abb0ebc
SHA181bf54ad9c5550a977a11633b74f1dbcc24fea08
SHA2562f6bb7273241b097d4f0d4dfc71e4b844432114f76c6c0d39ada57a7949670d4
SHA5124249221c0d55916bc6f848bc9f136df5ab1af3ad27893e7496defbc92b7f32e6e1c63ce135546bb4894fd6b6eedc7fa5b4bf02c1ac6ab6200e0341c34702ffd0
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB