Analysis
- max time kernel
128s - max time network
129s - platform
windows10_x64 - resource
win10 - submitted
17/07/2020, 05:29
General
- Target q6U9sgHlYJYOnFZ.exe
- Size 1.2MB
- Sample200717-vv99vkd5fx
- SHA256 8f4df940d9a199c45165a84eeb227c027203a66713ca8ea602ccf28e75e3b0bc
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious behavior: EnumeratesProcesses 13 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\q6U9sgHlYJYOnFZ.exe"C:\Users\Admin\AppData\Local\Temp\q6U9sgHlYJYOnFZ.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3588 -s 9362⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3792-0-0x0000000004EB0000-0x0000000004EB1000-memory.dmp
memory/3792-1-0x0000000004EB0000-0x0000000004EB1000-memory.dmp
memory/3792-3-0x00000000054E0000-0x00000000054E1000-memory.dmp