6fac6128af0c87fc3022f05b3ba5e1734ca7f256281e077817ddbac2720841bb

Analysis

Target
URGENT REQUEST FOR QUOTATION.2020_GOLDEN MICRON (M) SDN BHD.exe
Size 345KB
Sample200713-jfk85pmlpj
SHA256 6fac6128af0c87fc3022f05b3ba5e1734ca7f256281e077817ddbac2720841bb
MD5 320e54009666cd9a6fb1089a937bd54c
SHA1 7bf2e34a296851e31e90339a2d24954bf57a6106
SHA512 3b48ce3a3f117ce69e0e26b03569a8d63586684baa781e330e865abaf81ea1ed65ec93320bd8056c4e1511992b3743347820b47670eb651617e22594ef5a6a73
MD5 SHA1 SHA512

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4000	976	WerFault.exe	66

Suspicious behavior: EnumeratesProcesses 13 IoCs

Suspicious use of AdjustPrivilegeToken 3 IoCs

C:\Users\Admin\AppData\Local\Temp\URGENT REQUEST FOR QUOTATION.2020_GOLDEN MICRON (M) SDN BHD.exe
"C:\Users\Admin\AppData\Local\Temp\URGENT REQUEST FOR QUOTATION.2020_GOLDEN MICRON (M) SDN BHD.exe"
1⤵
PID:976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 976 -s 1136
  2⤵
  - Program crash
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4000

memory/4000-0-0x0000000004B50000-0x0000000004B51000-memory.dmp

Download

memory/4000-1-0x0000000004B50000-0x0000000004B51000-memory.dmp

Download

memory/4000-3-0x0000000005440000-0x0000000005441000-memory.dmp

Download