Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240319-en -
resource tags
-
submitted
10/04/2024, 08:03
General
-
Target
f38517692ab3e817182a396a407d9fe1c260c89bb6b733764737562f235115f0.dll
-
Size
184KB
-
MD5
d0fe27865ab271963e27973e81b77bae
-
SHA1
a5796a2cc31e1ab1a8a12131f803affe735a835f
-
SHA256
f38517692ab3e817182a396a407d9fe1c260c89bb6b733764737562f235115f0
-
SHA512
92dbedebb6a02ad1d0935ea12f502074ed822cadf410e56a7adbf7e5be91aa84eb053fc87c0812aa176a0f893cfdecf5738f7f591e8f096a2cc6c6724ff0feee
-
SSDEEP
3072:lkpTnY21vDE9rZVan6kyHrTqBai3oRu0zPgTQ7dL6HtdJkkQVEypc94tG+c6ThN:lSTnY21w9rZk6kyHiBb8LzPgTFy/c6
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f38517692ab3e817182a396a407d9fe1c260c89bb6b733764737562f235115f0.dll,#11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4508 --field-trial-handle=2284,i,13100272738549420251,6151825632958897606,262144 --variations-seed-version /prefetch:81⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB