Analysis
-
max time kernel
1465s -
max time network
1515s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11/02/2024, 15:36
General
-
Target
x64/plugins/WindowExplorer.dll
-
Size
133KB
-
MD5
0e8d04159c075f0048b89270d22d2dbb
-
SHA1
d0fa2367d329909b6c9efcb3cc2c2902d8cf9b22
-
SHA256
282696487ea5dc781788d5d8477b977f72b7c70f201c2af0cfe7e1a9fd8d749a
-
SHA512
56440f3feddc124574debfe3789e14d908982d4d8e9516f42fab7db7bcecdd3badd2f75e005016a7b9d87a00d5646b8df722bae8fba3932198babbe5335cf197
-
SSDEEP
3072:FrcYzsiPpE70C5FwyJBId/GkWXaVJ32kZ8:Frc0s502FFnS8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\x64\plugins\WindowExplorer.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5943bc81828e9ad9c0225c2acdd1c53c5
SHA1ed734f36eebca3c8d1b41dab81a108429f24f804
SHA256c3987cc15ea18065f4e0c9d41efe9beef0da2060f86ade4e3937400d9a50def6
SHA512a56b8d6106b5f93e52c13a24ee5514a2e4b25d855c603e018d679ed468942fdc1297bd4f2be12823f1a1ce3e01926e212d2b3faf48450a91a70f617e95d45aaf
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB