Analysis
- max time kernel
135s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20231023-en - resource tags
- submitted
18/11/2023, 01:38
General
- Target 868c528256713452b7f021a14dac65a031a3c9848f8375ae75e79962a4cddb4f.exe
- Size 1.3MB
- Sample231118-b2n37agf85
- SHA256 868c528256713452b7f021a14dac65a031a3c9848f8375ae75e79962a4cddb4f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\868c528256713452b7f021a14dac65a031a3c9848f8375ae75e79962a4cddb4f.exe"C:\Users\Admin\AppData\Local\Temp\868c528256713452b7f021a14dac65a031a3c9848f8375ae75e79962a4cddb4f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4432-0-0x000002814D160000-0x000002814D194000-memory.dmp
memory/4432-1-0x00007FF8F5C70000-0x00007FF8F6731000-memory.dmp
memory/4432-3-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-2-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-4-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-5-0x00007FF8F5C70000-0x00007FF8F6731000-memory.dmp
memory/4432-6-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-7-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-8-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-9-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-10-0x000002814DA40000-0x000002814DA48000-memory.dmp
memory/4432-11-0x000002814D810000-0x000002814D820000-memory.dmp
memory/4432-12-0x0000028167670000-0x00000281676A8000-memory.dmp
memory/4432-13-0x0000028167630000-0x000002816763E000-memory.dmp
memory/4432-15-0x00007FF8F5C70000-0x00007FF8F6731000-memory.dmp