Analysis
-
max time kernel
573s -
max time network
572s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
18-01-2024 20:14
General
-
Target
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pdb64.dll
-
Size
423KB
-
MD5
abbfc5178c4c4383ba479f515038ac69
-
SHA1
df78bdc11b6e6afe9e1c1582ce5af0383d0f5bc5
-
SHA256
d659e64e93d172aa0507e2c4c3b6ebfe225be2b97a61161bdf443e30151b2d6f
-
SHA512
240a8c5a31269314e0df1238d13f9937e5eebe5e2fbac692953be77e46835a074beff7685042cbf958055621c9d1c2a99bb772eec37f9c888b773e03e340b301
-
SSDEEP
6144:RKKbHLfiUpYw6vqDzalHjQMe+kTIfRS4dx82hHN+G2H8yer:RvLfikTJirk6I4d1U8y
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)\plugins\pdb64.dll",#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD55b4bd931c64d9dc0ebd2d9ba4eb8d00c
SHA10c85ac9ad985dfe4206b98f72f96bb83b894a55b
SHA25689c59acf0cea5ed5563c324115b3cac0c7ae42a01bd6bf4345cbff87f9f7140d
SHA5128ada3c396aebae1591ccf682f86ec18fa5cba979df7185a9f5e05be9f1d4587f5f03c5545a76b3bfde0076645e18107f3580b3e187e0a91220dad125e668c324
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB