fb6b1171776554a808c62f4045f5167603f70bf7611de64311ece0624b365397 | Triage

Resubmissions

04-05-2024 12:03

240504-n775gagb73 8

Analysis

max time kernel
137s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04-05-2024 12:03

Sharing

Report Analysis Logs

General

Target

UnlockerInject32.exe
Size

11KB
MD5

5b964dbcc99edee45a6f235417713a93
SHA1

e65bb79a470a509a50b4c275c10bc10892ab11ca
SHA256

3b1afea2711e5d731a60b41e87f4711fe1db3345fa316be20347376068479dd5
SHA512

60dd41e0434fcc7d6d57a02d69cd47c2b74c9c18316f59aee88da087c22c3e8408aa94ab9738edc1b229db8f83e620354394ae3847e216c2bce33dc0d3e62743
SSDEEP

192:kpjAiTRs0TjebH947yowJL/W6Mgb5+ebCfYEQpkqs1I5Zgjl5w:kWIsUgHqYJLygbPbCQW1M6jk

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

UnlockerInject32.exe

description	pid	Process
Token: SeDebugPrivilege	3228	UnlockerInject32.exe
Token: SeLoadDriverPrivilege	3228	UnlockerInject32.exe
Token: SeBackupPrivilege	3228	UnlockerInject32.exe

C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe
"C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads