Resubmissions
12-01-2024 13:14
240112-qg1c2shdb4 512-01-2024 13:02
240112-qaa5ksgdfl 512-01-2024 08:15
240112-j5sjsadbf3 5Analysis
-
max time kernel
564s -
max time network
584s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-01-2024 13:14
General
-
Target
email-plain-1.txt
-
Size
1005B
-
MD5
8b2e4e5f98385569740e8f572a13a490
-
SHA1
520d974f8b998ea8c50089f143c9628facd5eed8
-
SHA256
a826f824242207a867630ee6d75568d72256bdab4b9dd04612d53b5913a59c81
-
SHA512
d421881bcfda372200eece2d2274ec6c8b5f4ef4999e32c37ecc697e0e749bd7c365680348a918e11cac474a496940c9362abf7727a06581c819d5f0270d5d39
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\email-plain-1.txt1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD53ab1283bb36170c1c58330db9467b6d5
SHA1afe029455f9f173a10b88d8d90338f44d5b03b19
SHA2564db2f6cdf5eba1db14832bb75fccd254d11acebbf61115a5de78b082defe32f6
SHA5129cf9994ac012f5ddc400458630d62b9bb1eb9d9339df6a9208c66691d73d383d14b3e76cc3e585ec52de891c9ac306caf1122db390d580a3253111e18a41ae7b
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB