Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14-01-2024 17:30
General
-
Target
binaries/Emulator64.dll
-
Size
647KB
-
MD5
a17aa2d3ed990d1ff3ef724935439eba
-
SHA1
423303cc21d79e7c0ec959981216986c52717a86
-
SHA256
9a639db2545f345ecc972c4623bc71732411056f81219aa898d86cd80b318de5
-
SHA512
6ceb59299b2854c5c3acc059f5b391139d3d85ccd93543154eca1ba0bc1f1777018d531599492e95808efb194bc2addbc643ca6fbf3398d48939da349d9b87cc
-
SSDEEP
12288:cak8/9wOejI/t38L5w81/DTFovaDHhXlxyBCv/:Fk8lwdjIlMLim/DTFOaDHh/yBCH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\binaries\Emulator64.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB