Analysis
- max time kernel
42s - max time network
47s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 21:30
General
- Target AndroidSideloader v2.29.2.exe
- Size 4.1MB
- Sample240613-1cmaqs1apf
- SHA256 6cf2bcdb1a463fc69eddb125eba8cc12854ee23effcd7c65b968667c668a7f0b
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AndroidSideloader v2.29.2.exe"C:\Users\Admin\AppData\Local\Temp\AndroidSideloader v2.29.2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
user.config
user.config
user.config
memory/1348-10-0x0000000005FB0000-0x000000000603E000-memory.dmp
memory/1348-4-0x0000000074860000-0x0000000075010000-memory.dmp
memory/1348-7-0x0000000005D50000-0x0000000005D5A000-memory.dmp
memory/1348-8-0x0000000005D60000-0x0000000005D6C000-memory.dmp
memory/1348-9-0x0000000005FA0000-0x0000000005FAE000-memory.dmp
memory/1348-0-0x000000007486E000-0x000000007486F000-memory.dmp
memory/1348-3-0x0000000005DA0000-0x0000000005E32000-memory.dmp
memory/1348-2-0x0000000006350000-0x00000000068F4000-memory.dmp
memory/1348-1-0x0000000000EF0000-0x0000000001312000-memory.dmp
memory/1348-33-0x0000000074860000-0x0000000075010000-memory.dmp
memory/1348-34-0x0000000074860000-0x0000000075010000-memory.dmp
memory/1348-35-0x000000007486E000-0x000000007486F000-memory.dmp
memory/1348-36-0x0000000074860000-0x0000000075010000-memory.dmp