Resubmissions
13/05/2024, 22:03
240513-1yc9ysga661013/05/2024, 21:55
240513-1svbaafb7s1013/05/2024, 21:49
240513-1pmf9sff481013/05/2024, 07:47
240513-jmr6asga64713/05/2024, 07:44
240513-jksn2sch3w712/05/2024, 10:52
240512-myqy6abg9x711/05/2024, 13:06
240511-qcaxlaca29311/05/2024, 12:19
240511-phhzqaaf23311/05/2024, 12:07
240511-paandaab473Analysis
- max time kernel
133s - max time network
138s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
- submitted
11/05/2024, 12:19
General
- Target Loader.exe
- Size 347KB
- Sample240511-phhzqaaf23
- SHA256 c9c660914e4d58a6e0dd460afae6e4af288c9f191ad8592dc95db5a69868fc70
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loader.exe"C:\Users\Admin\AppData\Local\Temp\Loader.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2056-0-0x00007FFD6FBC3000-0x00007FFD6FBC4000-memory.dmp
memory/2056-1-0x0000000000300000-0x000000000035E000-memory.dmp
memory/2056-2-0x00007FFD6FBC0000-0x00007FFD705AC000-memory.dmp
memory/2056-3-0x00007FFD6FBC0000-0x00007FFD705AC000-memory.dmp
memory/2056-5-0x00007FFD6FBC0000-0x00007FFD705AC000-memory.dmp