Analysis
-
max time kernel
148s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01-11-2024 08:01
General
-
Target
start-main/fgthawd.exe
-
Size
472KB
-
MD5
95a8abfcc4bdd662984351539c7fc9c4
-
SHA1
8ac52de0cdb2288b41c9f647af2cc879a5390c2f
-
SHA256
6022fdab4f5ac5267337aab5a6eefd5076f4e615838b3ff31c6335d985306cb8
-
SHA512
32a0b205b725e90d6e8ca728ffd0712d743c9380ed58ffde489fb5517f60ddca893e5bcd0e9313ed9c3690633ad58613b3d52fb595c43dae7297dbd0b156b582
-
SSDEEP
12288:8+2Ksc+c1YpqA9CO2Iev1xAdsw81niKfx:EKs5MYIA9Xev1x2s71ikx
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 35 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\start-main\fgthawd.exe"C:\Users\Admin\AppData\Local\Temp\start-main\fgthawd.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
488KB
-
Filesize
10.8MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
8KB
-
Filesize
10.8MB