Resubmissions

06-08-2024 15:57

240806-td7vhatbkl 3

06-08-2024 15:57

240806-tdwr8starq 3

Analysis

  • max time kernel
    99s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-08-2024 15:57

General

  • Target

    DrvLdr.exe

  • Size

    367KB

  • MD5

    dc381abcde0ab105398640d991697d6a

  • SHA1

    76e4a42d757b37e56b7840f16e3d111b23eb20a4

  • SHA256

    80bd268b7b89d3e523bb2661b7537435ee7f3ab332f8a3dde7442024adc278de

  • SHA512

    50c83e6facf54f30acf449ae72950b8e1627aab406b8c804c276a451f3bae026a4979a059771866fa5bfb1bf0828ef1e762c8601c1a6636dc2eb7188ef7f71cc

  • SSDEEP

    6144:ceHy0LXWxxDmyxo0S+rXjnNvDlYBRnQFiwbtcNWVRCu5rp:cYLX0BmyxrS+7lmAVRCuR

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DrvLdr.exe
    "C:\Users\Admin\AppData\Local\Temp\DrvLdr.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads