Analysis
- max time kernel
51s - max time network
51s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 19:02
General
- Target External-Base.exe
- Size 498KB
- Sample240613-xpzvtayape
- SHA256 4fb79b84ca9d112cbbc54230154dd0c7bd0c7d504f635b132b46fba114e9157f
Score
8/10
Malware Config
Signatures
- Sets service image path in registry 2 TTPs 1 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\External-Base.exe"C:\Users\Admin\AppData\Local\Temp\External-Base.exe"1⤵
- Sets service image path in registry
- Suspicious behavior: LoadsDriver
- Suspicious use of AdjustPrivilegeToken