Analysis
- max time kernel
119s - max time network
122s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
27/05/2024, 13:22
General
- Target 3b8f605388479cd9296e0be1ea9d1f60.exe
- Size 3.8MB
- Sample240527-ql79fsfa96
- SHA256 d550397a71e1fc77be3460d1742f1df63d43ba74487a10ec96befc1c768768bc
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b8f605388479cd9296e0be1ea9d1f60.exe"C:\Users\Admin\AppData\Local\Temp\3b8f605388479cd9296e0be1ea9d1f60.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2864-0-0x000000007453E000-0x000000007453F000-memory.dmp
memory/2864-1-0x0000000005900000-0x0000000005D52000-memory.dmp
memory/2864-2-0x0000000074530000-0x0000000074C1E000-memory.dmp
memory/2864-3-0x0000000074530000-0x0000000074C1E000-memory.dmp
memory/2864-4-0x00000000054B0000-0x0000000005900000-memory.dmp
memory/2864-5-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-14-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-16-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-6-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-20-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-9-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-26-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-24-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-22-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-28-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-30-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-32-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-34-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-36-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-38-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-40-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-42-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-18-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-46-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-48-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-50-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-44-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-12-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-10-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-58-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-60-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-62-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-64-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-52-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-66-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-68-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-56-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-54-0x00000000054B0000-0x00000000058FA000-memory.dmp
memory/2864-5737-0x0000000074530000-0x0000000074C1E000-memory.dmp
memory/2864-5738-0x0000000074530000-0x0000000074C1E000-memory.dmp
memory/2864-5739-0x000000007453E000-0x000000007453F000-memory.dmp
memory/2864-5740-0x0000000074530000-0x0000000074C1E000-memory.dmp
memory/2864-5741-0x0000000074530000-0x0000000074C1E000-memory.dmp