Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20251231-en - resource tags
- submitted
30/12/2025, 23:59
General
- Target 6b1dd3ce64cc9a03702ad98c51bc33257dfe91584bdc5aa98862d1237f61a284.exe
- Size 1.4MB
- Sample251230-31788ad18f
- SHA256 6b1dd3ce64cc9a03702ad98c51bc33257dfe91584bdc5aa98862d1237f61a284
Score
7/10
Malware Config
Signatures
- Drops startup file 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b1dd3ce64cc9a03702ad98c51bc33257dfe91584bdc5aa98862d1237f61a284.exe"C:\Users\Admin\AppData\Local\Temp\6b1dd3ce64cc9a03702ad98c51bc33257dfe91584bdc5aa98862d1237f61a284.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4764-0-0x0000000000FB0000-0x0000000001126000-memory.dmp
memory/4764-3-0x000000001BF00000-0x000000001BF10000-memory.dmp
memory/4764-4-0x000000001BF00000-0x000000001BF10000-memory.dmp