Resubmissions
19-09-2024 07:29
240919-jbcapsxeqk 719-09-2024 07:27
240919-jaa19axcje 719-09-2024 07:21
240919-h66x5axanb 719-09-2024 07:04
240919-hwcxaswenh 719-09-2024 07:04
240919-hv496awend 319-09-2024 07:00
240919-hs4kvawfqr 3Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 07:00
General
-
Target
internationalPaymentDetails/ActionCenter.dll
-
Size
2.8MB
-
MD5
6600755c2a115ab24862611227e83e3d
-
SHA1
2067379db6a1817513c0f5de5640906bb7168f78
-
SHA256
c4b436e2b74e8b98bccf9ec8348fbbd6384d309c5c67d2fb995293d380e9bc31
-
SHA512
fb94b75c6dad7d4d55b79cbbdb8564c0aca5d3ece2a743bbcc169df4070a8444a344c8d221fc5894de85cbc10d555bc4d0cd4a70d91f623bc05d38f9ba94ebe5
-
SSDEEP
49152:UDwPqn6R9cOCwJWvJW0XHOmt08AgFWen4IzhS:A6kvyIz
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\internationalPaymentDetails\ActionCenter.dll,#11⤵
- Suspicious use of AdjustPrivilegeToken