Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20250502-en - resource tags
- submitted
04/05/2025, 06:04
General
- Target KLwC6vii.exe
- Size 17KB
- Sample250504-gspagsen21
- SHA256 a8745addaf2f95e0fe6afbc6d6712f817d4a819cf1d08bf7c0ff01822e18e1db
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"C:\Users\Admin\AppData\Local\Temp\KLwC6vii.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3620-0-0x00007FF8FE295000-0x00007FF8FE296000-memory.dmp
memory/3620-1-0x000000001BEE0000-0x000000001C3AE000-memory.dmp
memory/3620-3-0x000000001C3B0000-0x000000001C456000-memory.dmp
memory/3620-2-0x00007FF8FDFE0000-0x00007FF8FE981000-memory.dmp
memory/3620-4-0x000000001C520000-0x000000001C582000-memory.dmp
memory/3620-5-0x000000001CAA0000-0x000000001CB3C000-memory.dmp
memory/3620-6-0x00007FF8FDFE0000-0x00007FF8FE981000-memory.dmp
memory/3620-7-0x00007FF8FE295000-0x00007FF8FE296000-memory.dmp
memory/3620-8-0x00007FF8FDFE0000-0x00007FF8FE981000-memory.dmp
memory/3620-9-0x00007FF8FDFE0000-0x00007FF8FE981000-memory.dmp