211c37d00b6555ca57c72c779220f31fdb21394436066991149c604487b44991 | Triage

Analysis

max time kernel
133s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
12-05-2024 10:21

Sharing

Report Analysis Logs

General

Target

update.exe
Size

434KB
MD5

aed5f5fefbf6754de7093fdccbd93f33
SHA1

6fe13f90a3e13b0b5c52c7af75bca322b1874738
SHA256

d45b8e23ff646739766076125d9b57737ab3837f0e47d7d631b6cc30d8adaf51
SHA512

289319de0c2d1368982a5217d53a63dceecee987f908bdf52713cccb92ca95957f00f48f1487f3feb961a6dece26119e32e650e26bfd8575fb5fdddac33b742e
SSDEEP

6144:n6z/WinQf4ihh47bn3z1a26cLawMqskQZeATc8cP5/kBp7HQkYD:6zuSihAz3zvkYD

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

update.exe

description pid process

Token: SeDebugPrivilege 4064 update.exe

C:\Users\Admin\AppData\Local\Temp\update.exe
"C:\Users\Admin\AppData\Local\Temp\update.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads