Analysis
- max time kernel
55s - max time network
49s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
- submitted
01/05/2024, 06:39
General
- Target 4cea9711ee6cf7c880c00246253fd14a.exe
- Size 2.9MB
- Sample240501-helswacd24
- SHA256 ce753b226cf4c5fa1795ca13754d9b9add4cf6752cad6268ca4fd8c95688cc77
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4cea9711ee6cf7c880c00246253fd14a.exe"C:\Users\Admin\AppData\Local\Temp\4cea9711ee6cf7c880c00246253fd14a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2296-0-0x0000019E3CA90000-0x0000019E3CD14000-memory.dmp
memory/2296-1-0x00007FFF7DDE0000-0x00007FFF7E8A1000-memory.dmp
memory/2296-2-0x0000019E3EA30000-0x0000019E3EA40000-memory.dmp
memory/2296-3-0x0000019E571C0000-0x0000019E57444000-memory.dmp
memory/2296-4-0x0000019E3E9A0000-0x0000019E3E9FE000-memory.dmp
memory/2296-5-0x00007FFF7DDE0000-0x00007FFF7E8A1000-memory.dmp