Analysis
- max time kernel
142s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
14/01/2024, 23:17
General
- Target swiftshader/libGLESv2.dll
- Size 3.0MB
- Sample240114-29pykadebm
- SHA256 45bb5e1f8dd87129ac0a75c78f8f29d06e3ac182a00fc5199b692068f1e05a53
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\swiftshader\libGLESv2.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3948-0-0x0000025EC8240000-0x0000025EC8250000-memory.dmp
memory/3948-16-0x0000025EC8340000-0x0000025EC8350000-memory.dmp
memory/3948-36-0x0000025ED0770000-0x0000025ED0771000-memory.dmp
memory/3948-35-0x0000025ED0660000-0x0000025ED0661000-memory.dmp
memory/3948-34-0x0000025ED0660000-0x0000025ED0661000-memory.dmp
memory/3948-32-0x0000025ED0630000-0x0000025ED0631000-memory.dmp