Analysis
-
max time kernel
123s -
max time network
9s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
15-03-2021 09:49
General
-
Target
38ee6bea62658ae4fa75914261a5848a8db5b332ddfb52daf01e958871559e15.exe
-
Size
1.6MB
-
MD5
7feccbef4ed3a323ed763d24d022e4df
-
SHA1
c6d62240ffd19c94a5f5080d7518b65555eb4fb2
-
SHA256
38ee6bea62658ae4fa75914261a5848a8db5b332ddfb52daf01e958871559e15
-
SHA512
ccb1b77974fb1be74fc71f3f6d036aafdf077d214efadd933f8e3f7e4e9e9f4e8915d9d4da31b95a65e15c29429a726aa3d3116fbb4f2b73c3fa95ddc78d22e2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\38ee6bea62658ae4fa75914261a5848a8db5b332ddfb52daf01e958871559e15.exe"C:\Users\Admin\AppData\Local\Temp\38ee6bea62658ae4fa75914261a5848a8db5b332ddfb52daf01e958871559e15.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1884 -s 10922⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
8KB
-
Filesize
68KB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB