Analysis
- max time kernel
136s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
18/01/2024, 01:28
General
- Target cc41ce51b5e403bd80f234105f6e2b66a584e4dc2185b0b11d0aba16965a8b9a.dll
- Size 247KB
- Sample240118-bv2eyaabej
- SHA256 cc41ce51b5e403bd80f234105f6e2b66a584e4dc2185b0b11d0aba16965a8b9a
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cc41ce51b5e403bd80f234105f6e2b66a584e4dc2185b0b11d0aba16965a8b9a.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1808-16-0x0000025009D80000-0x0000025009D90000-memory.dmp
memory/1808-0-0x0000025009C80000-0x0000025009C90000-memory.dmp
memory/1808-36-0x0000025012230000-0x0000025012231000-memory.dmp
memory/1808-35-0x0000025012120000-0x0000025012121000-memory.dmp
memory/1808-34-0x0000025012120000-0x0000025012121000-memory.dmp
memory/1808-32-0x00000250120F0000-0x00000250120F1000-memory.dmp