Overview

overview

10

Static

static

Detalles d...co.exe

windows7_x64

10

Detalles d...co.exe

windows10_x64

3

Analysis

  • max time kernel
    69s
  • max time network
    120s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    09/07/2020, 12:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Detalles del banco.exe

  • Size

    609KB

  • MD5

    19188fc2f2a8482cc006873c4e52fe2b

  • SHA1

    271d7978928422bb65640c0035b8f29f56a90025

  • SHA256

    7a41a1a3587338cb69ba10c46950176faf9dabd938ddb9ad7dfeb65d2b79c96e

  • SHA512

    649b5f08261fbc66e88476ac4c05e3ea04d357fc6cc0747720320001195964aecb0ae282b4ebd62b6478776e8d2f1d71dcba86ebbb877acc4c9f7c872dba6c63

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Detalles del banco.exe
    "C:\Users\Admin\AppData\Local\Temp\Detalles del banco.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3100
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3100 -s 1264
      2⤵
      • Program crash
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3928-0-0x0000000004300000-0x0000000004301000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3928-1-0x0000000004300000-0x0000000004301000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3928-3-0x0000000004BB0000-0x0000000004BB1000-memory.dmp

    Filesize

    4KB

    Download