Analysis
- max time kernel
117s - max time network
120s - platform
windows10_x64 - resource
win10 - submitted
17/07/2020, 05:30
General
- Target dlWs3KImcASZUXb.exe
- Size 1.3MB
- Sample200717-s8271d2ngx
- SHA256 1db65284dd73545215b9db3834b16709bf5bf5c33a417c38a205d09317cd6d0d
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious behavior: EnumeratesProcesses 13 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dlWs3KImcASZUXb.exe"C:\Users\Admin\AppData\Local\Temp\dlWs3KImcASZUXb.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 11522⤵
- Program crash
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3868-0-0x0000000004440000-0x0000000004441000-memory.dmp
memory/3868-1-0x0000000004440000-0x0000000004441000-memory.dmp
memory/3868-3-0x0000000004B80000-0x0000000004B81000-memory.dmp