27488792792bbbb1253e1a2622e3a6af8339003aef385337e4f8e8e02099345a | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
31-05-2024 06:59

Sharing

Report Analysis Logs

General

Target

UnlockerInject32.exe
Size

11KB
MD5

5b964dbcc99edee45a6f235417713a93
SHA1

e65bb79a470a509a50b4c275c10bc10892ab11ca
SHA256

3b1afea2711e5d731a60b41e87f4711fe1db3345fa316be20347376068479dd5
SHA512

60dd41e0434fcc7d6d57a02d69cd47c2b74c9c18316f59aee88da087c22c3e8408aa94ab9738edc1b229db8f83e620354394ae3847e216c2bce33dc0d3e62743
SSDEEP

192:kpjAiTRs0TjebH947yowJL/W6Mgb5+ebCfYEQpkqs1I5Zgjl5w:kWIsUgHqYJLygbPbCQW1M6jk

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

UnlockerInject32.exe

description	pid	Process
Token: SeDebugPrivilege	3988	UnlockerInject32.exe
Token: SeLoadDriverPrivilege	3988	UnlockerInject32.exe
Token: SeBackupPrivilege	3988	UnlockerInject32.exe

C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe
"C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads