Analysis
- max time kernel
147s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
27/05/2024, 13:22
General
- Target 3b8f605388479cd9296e0be1ea9d1f60.exe
- Size 3.8MB
- Sample240527-ql79fsfa96
- SHA256 d550397a71e1fc77be3460d1742f1df63d43ba74487a10ec96befc1c768768bc
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b8f605388479cd9296e0be1ea9d1f60.exe"C:\Users\Admin\AppData\Local\Temp\3b8f605388479cd9296e0be1ea9d1f60.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1088-0-0x000000007507E000-0x000000007507F000-memory.dmp
memory/1088-1-0x0000000005A80000-0x0000000005ED2000-memory.dmp
memory/1088-2-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-4-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-3-0x0000000005ED0000-0x0000000006474000-memory.dmp
memory/1088-6-0x0000000006480000-0x00000000068D0000-memory.dmp
memory/1088-7-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-14-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-16-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-26-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-30-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-34-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-55-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-62-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-60-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-64-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-58-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-70-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-68-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-66-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-56-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-52-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-50-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-48-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-46-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-44-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-42-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-40-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-38-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-32-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-36-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-28-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-24-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-22-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-20-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-18-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-12-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-11-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-8-0x0000000006480000-0x00000000068CA000-memory.dmp
memory/1088-5739-0x00000000068D0000-0x0000000006962000-memory.dmp
memory/1088-5740-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5741-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5742-0x0000000006A00000-0x0000000006A0A000-memory.dmp
memory/1088-5743-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5744-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5745-0x000000007507E000-0x000000007507F000-memory.dmp
memory/1088-5746-0x0000000075070000-0x0000000075820000-memory.dmp
memory/1088-5747-0x0000000075070000-0x0000000075820000-memory.dmp