Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
20-12-2023 12:39
General
-
Target
1/PO20230225-13360.exe
-
Size
1.7MB
-
MD5
1de394a0a6affdde99950a9e1ad68850
-
SHA1
4ee5da777bd322a52bc866cc825e92717e6d9719
-
SHA256
56ebfae5fdf1e38b652f712f7e4672826e7c805b70ab6f21c02418461d99fabf
-
SHA512
aa385c57afa4ec2afe778cae203a7488a271aec965aa9338639b8a5298931c6319f5eee3c3304e31bb8fea23797f61d416dd7ca74b5d67db5c2633702b74611b
-
SSDEEP
24576:a9Q+/0oYyxPxPO9fju1khU+A3zj9hQhNsc7hf:WQmQTszj9hQhNs8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1\PO20230225-13360.exe"C:\Users\Admin\AppData\Local\Temp\1\PO20230225-13360.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3084-0-0x0000013061B60000-0x0000013061D0A000-memory.dmpFilesize
1.7MB
-
memory/3084-1-0x00007FFCA1350000-0x00007FFCA1E11000-memory.dmpFilesize
10.8MB
-
memory/3084-2-0x000001307C290000-0x000001307C2A0000-memory.dmpFilesize
64KB
-
memory/3084-3-0x00007FFCA1350000-0x00007FFCA1E11000-memory.dmpFilesize
10.8MB
-
memory/3084-4-0x000001307C290000-0x000001307C2A0000-memory.dmpFilesize
64KB