Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
03-10-2024 10:00
General
-
Target
MantiWPF/MantiWPF.exe
-
Size
11.0MB
-
MD5
4d8b364a954c985ffa762e787d97da9b
-
SHA1
d40ed4d7d89e71224dff54c9ef2312c03cc10fc6
-
SHA256
dcfcd91aaad79df3346443d8d50487c5eef0253b9dcd98c66c08c526b892789d
-
SHA512
292d002be4f87fd9671ce76a93d0e75da0a9943bb3e044dfdc82c8ff90c31becc5f1b7ec0bbc4f2aa2a67a28b720a74c87808362e27291496709465f11ccdfd6
-
SSDEEP
196608:YJZrXWZHak8RxjV93m5HY3Hrl0LOfQEIycr9ZM/CYluLuQyn67fjUmYlxgTju8xz:SrXSHak8RxjVVmkLlXfJKK7uLuQyn68y
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MantiWPF\MantiWPF.exe"C:\Users\Admin\AppData\Local\Temp\MantiWPF\MantiWPF.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4516-0-0x00007FF944ED3000-0x00007FF944ED5000-memory.dmpFilesize
8KB
-
memory/4516-1-0x000001E7C68F0000-0x000001E7C73F6000-memory.dmpFilesize
11.0MB
-
memory/4516-2-0x000001E7E1980000-0x000001E7E2714000-memory.dmpFilesize
13.6MB
-
memory/4516-3-0x000001E7C7820000-0x000001E7C7826000-memory.dmpFilesize
24KB
-
memory/4516-4-0x00007FF944ED0000-0x00007FF945992000-memory.dmpFilesize
10.8MB
-
memory/4516-5-0x00007FF944ED0000-0x00007FF945992000-memory.dmpFilesize
10.8MB
-
memory/4516-6-0x000001E7E2F70000-0x000001E7E3022000-memory.dmpFilesize
712KB
-
memory/4516-7-0x00007FF944ED0000-0x00007FF945992000-memory.dmpFilesize
10.8MB
-
memory/4516-8-0x00007FF944ED0000-0x00007FF945992000-memory.dmpFilesize
10.8MB