Analysis
-
max time kernel
132s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
19/02/2024, 22:42
General
-
Target
Virus/Virus/obj/Release/AxInterop.ShockwaveFlashObjects.dll
-
Size
28KB
-
MD5
b576d3408b2666af11bf60a16160c5ef
-
SHA1
51e026f42a14d5eaff5460a7af5e307eff5672b9
-
SHA256
daf9589dba16ff3e7f4262d97880f0d95bc3b552844c3d9b515fbbc23fc925d9
-
SHA512
737522cddf41a35ed8d1e258f09509a0af7e02ce0e6ccc453f6d6d92e2d0c49abaac25d1942a191804ea16828ff50b9ee9e8066c692b171b1328ad0d625f223f
-
SSDEEP
192:l0wBqUkWkzIeKiSOmIeuY0w9Dss+gcbs9WN4gWro797s/+/EF6ae5QcBEDxdQylx:MDsoYEg6UQ+ipcaFgdh
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Virus\Virus\obj\Release\AxInterop.ShockwaveFlashObjects.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB