Resubmissions
15/09/2024, 22:00
240915-1wpj7svapc1015/09/2024, 21:56
240915-1tbwbsthne1020/08/2024, 13:49
240820-q4v2vayfmp10Analysis
- max time kernel
146s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
20/08/2024, 13:49
General
- Target bazaar.2020.02/HEUR-Backdoor.MSIL.Revenge.exe
- Size 16KB
- Sample240820-q4v2vayfmp
- SHA256 c35e3bdf0d1a7275e73f3c8c9fb57cf874ffa19ffafae649025b1e90cd07c096
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.Revenge.exe"C:\Users\Admin\AppData\Local\Temp\bazaar.2020.02\HEUR-Backdoor.MSIL.Revenge.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2192-0-0x00007FF9FB825000-0x00007FF9FB826000-memory.dmp
memory/2192-2-0x000000001B7A0000-0x000000001BC6E000-memory.dmp
memory/2192-1-0x00007FF9FB570000-0x00007FF9FBF11000-memory.dmp
memory/2192-3-0x000000001BD20000-0x000000001BDC6000-memory.dmp
memory/2192-4-0x000000001BE90000-0x000000001BEF2000-memory.dmp
memory/2192-5-0x00007FF9FB570000-0x00007FF9FBF11000-memory.dmp
memory/2192-6-0x00007FF9FB825000-0x00007FF9FB826000-memory.dmp
memory/2192-7-0x00007FF9FB570000-0x00007FF9FBF11000-memory.dmp