Resubmissions
13/05/2024, 22:03
240513-1yc9ysga661013/05/2024, 21:55
240513-1svbaafb7s1013/05/2024, 21:49
240513-1pmf9sff481013/05/2024, 07:47
240513-jmr6asga64713/05/2024, 07:44
240513-jksn2sch3w712/05/2024, 10:52
240512-myqy6abg9x711/05/2024, 13:06
240511-qcaxlaca29311/05/2024, 12:19
240511-phhzqaaf23311/05/2024, 12:07
240511-paandaab473Analysis
- max time kernel
130s - max time network
103s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
- submitted
11/05/2024, 12:19
General
- Target Loader.exe
- Size 347KB
- Sample240511-phhzqaaf23
- SHA256 c9c660914e4d58a6e0dd460afae6e4af288c9f191ad8592dc95db5a69868fc70
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loader.exe"C:\Users\Admin\AppData\Local\Temp\Loader.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2876-0-0x0000000000D60000-0x0000000000DBE000-memory.dmp
memory/2876-1-0x00007FF8C5923000-0x00007FF8C5925000-memory.dmp
memory/2876-2-0x00007FF8C5920000-0x00007FF8C63E1000-memory.dmp
memory/2876-3-0x00007FF8C5920000-0x00007FF8C63E1000-memory.dmp
memory/2876-5-0x00007FF8C5920000-0x00007FF8C63E1000-memory.dmp