Analysis
-
max time kernel
146s -
max time network
155s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
05-10-2024 10:25
General
-
Target
MantiWPF/MantiWPF.exe
-
Size
11.0MB
-
MD5
4d8b364a954c985ffa762e787d97da9b
-
SHA1
d40ed4d7d89e71224dff54c9ef2312c03cc10fc6
-
SHA256
dcfcd91aaad79df3346443d8d50487c5eef0253b9dcd98c66c08c526b892789d
-
SHA512
292d002be4f87fd9671ce76a93d0e75da0a9943bb3e044dfdc82c8ff90c31becc5f1b7ec0bbc4f2aa2a67a28b720a74c87808362e27291496709465f11ccdfd6
-
SSDEEP
196608:YJZrXWZHak8RxjV93m5HY3Hrl0LOfQEIycr9ZM/CYluLuQyn67fjUmYlxgTju8xz:SrXSHak8RxjVVmkLlXfJKK7uLuQyn68y
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MantiWPF\MantiWPF.exe"C:\Users\Admin\AppData\Local\Temp\MantiWPF\MantiWPF.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/6092-0-0x00007FFB305F3000-0x00007FFB305F5000-memory.dmpFilesize
8KB
-
memory/6092-1-0x000001A59EAE0000-0x000001A59F5E6000-memory.dmpFilesize
11.0MB
-
memory/6092-2-0x000001A5B9C40000-0x000001A5BA9D4000-memory.dmpFilesize
13.6MB
-
memory/6092-3-0x000001A59F9F0000-0x000001A59F9F6000-memory.dmpFilesize
24KB
-
memory/6092-4-0x00007FFB305F0000-0x00007FFB310B2000-memory.dmpFilesize
10.8MB
-
memory/6092-5-0x00007FFB305F0000-0x00007FFB310B2000-memory.dmpFilesize
10.8MB
-
memory/6092-6-0x000001A5BB150000-0x000001A5BB202000-memory.dmpFilesize
712KB
-
memory/6092-7-0x00007FFB305F0000-0x00007FFB310B2000-memory.dmpFilesize
10.8MB
-
memory/6092-8-0x00007FFB305F0000-0x00007FFB310B2000-memory.dmpFilesize
10.8MB