Analysis
-
max time kernel
63s -
max time network
81s -
platform
windows10_x64 -
resource
win10 -
submitted
09/07/2020, 13:48
General
-
Target
f70c4044cff54d7bb32634d189f5ac234091f53a5acce9f17dcfefca4c22b397.exe
-
Size
5KB
-
MD5
525b3925ccf50db66710afdc2fb0c9e5
-
SHA1
eb76311855d5e4662a4e9caf76be7b4601be57a9
-
SHA256
f70c4044cff54d7bb32634d189f5ac234091f53a5acce9f17dcfefca4c22b397
-
SHA512
74a1d82f11a542535c9de3505e92c1905888578da0d9fb45aeaa4ca1572d0afa06e35fbcf2e51c76266bef9cb389cc923f1d71f50146e7f970b57e24fdc30541
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 13 IoCs
-
Modifies control panel 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f70c4044cff54d7bb32634d189f5ac234091f53a5acce9f17dcfefca4c22b397.exe"C:\Users\Admin\AppData\Local\Temp\f70c4044cff54d7bb32634d189f5ac234091f53a5acce9f17dcfefca4c22b397.exe"1⤵
- Modifies control panel
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3616 -s 9522⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB