30b7006df7750170e291d41e682a629cc2be0d01ba980eeb195ba260751880a3 | Triage

Analysis

max time kernel
208s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 22:42

Sharing

Report Analysis Logs

General

Target

05f0e652572f542b8254b31d6c3e6b00.exe
Size

13KB
MD5

05f0e652572f542b8254b31d6c3e6b00
SHA1

faf172e40bf98cd53a21747494644ff655f0f114
SHA256

30b7006df7750170e291d41e682a629cc2be0d01ba980eeb195ba260751880a3
SHA512

b939a6811fbc1fe3054c56af50f1f3dd76b6e7885fe16ff6fae0c43ce1c2aecf17b8288e46a307be6e9d57b425feae92e8062e04bc7da08a156b198c35ee461e
SSDEEP

384:ISywQQCZnNfFPiSamXQ9bFMru049EIJXN7gSIOsan:jyECVPDLg9uwD9MSIq

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemtimePrivilege	2432	05f0e652572f542b8254b31d6c3e6b00.exe

C:\Users\Admin\AppData\Local\Temp\05f0e652572f542b8254b31d6c3e6b00.exe
"C:\Users\Admin\AppData\Local\Temp\05f0e652572f542b8254b31d6c3e6b00.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2432-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2432-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download