Analysis
-
max time kernel
40s -
max time network
50s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
-
submitted
01-07-2024 21:37
General
-
Target
New Text Document mod.exe
-
Size
8KB
-
MD5
69994ff2f00eeca9335ccd502198e05b
-
SHA1
b13a15a5bea65b711b835ce8eccd2a699a99cead
-
SHA256
2e2e035ece4accdee838ecaacdc263fa526939597954d18d1320d73c8bf810c2
-
SHA512
ced53147894ed2dfc980bcb50767d9734ba8021f85842a53bb4bb4c502d51b4e9884f5f74c4dd2b70b53cafbe2441376675f7bd0f19bb20a3becb091a34fb9f3
-
SSDEEP
96:y7ov9wc1dN1Unh3EHJ40CUJCrQt0LpCBIW12nEtgpH9GIkQYQoBNw9fnmK5iLjTv:yZyTFJfCB20LsBIW12n/eIkQ2BNg5S1
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\New Text Document mod.exe"C:\Users\Admin\AppData\Local\Temp\New Text Document mod.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2244-1-0x00007FFAC46D3000-0x00007FFAC46D5000-memory.dmpFilesize
8KB
-
memory/2244-0-0x00000000001B0000-0x00000000001B8000-memory.dmpFilesize
32KB
-
memory/2244-2-0x00007FFAC46D0000-0x00007FFAC5192000-memory.dmpFilesize
10.8MB
-
memory/2244-3-0x00007FFAC46D0000-0x00007FFAC5192000-memory.dmpFilesize
10.8MB