Analysis
- max time kernel
149s - max time network
108s - platform
windows11-21h2_x64 - resource
win11-20250502-en - resource tags
- submitted
08/05/2026, 12:38
General
- Target 476fd54b105098bde1bfd85a2f55974d1d4c2e0c010ce2ffa522cbbca4184937.exe
- Size 148KB
- Sample260508-pvbfeahs4x
- SHA256 476fd54b105098bde1bfd85a2f55974d1d4c2e0c010ce2ffa522cbbca4184937
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\476fd54b105098bde1bfd85a2f55974d1d4c2e0c010ce2ffa522cbbca4184937.exe"C:\Users\Admin\AppData\Local\Temp\476fd54b105098bde1bfd85a2f55974d1d4c2e0c010ce2ffa522cbbca4184937.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5740-0-0x000001F3D1960000-0x000001F3D198A000-memory.dmp
memory/5740-1-0x000001F3EBF90000-0x000001F3EBFA0000-memory.dmp
memory/5740-2-0x000001F3D1DF0000-0x000001F3D1DFE000-memory.dmp
memory/5740-3-0x000001F3D1D30000-0x000001F3D1D61000-memory.dmp
memory/5740-6-0x000001F3EBF90000-0x000001F3EBFA0000-memory.dmp
memory/5740-5-0x000001F3D1F00000-0x000001F3D1F12000-memory.dmp
memory/5740-4-0x000001F3D1E00000-0x000001F3D1E0C000-memory.dmp
memory/5740-20-0x000001F3D1D30000-0x000001F3D1D61000-memory.dmp
memory/5740-21-0x000001F3D1E00000-0x000001F3D1E0C000-memory.dmp