Analysis
- max time kernel
14s - max time network
113s - platform
windows10_x64 - resource
win10v20201028 - submitted
25/03/2021, 10:14
General
- Target Enq No.BPC-9840117.exe
- Size 1.0MB
- Sample210325-994jgtcfne
- SHA256 bef454e332e2f3de22ad0612f8bc8ef70eac3809db0af6a2773e2d1d9bfecd3f
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious behavior: EnumeratesProcesses 14 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Enq No.BPC-9840117.exe"C:\Users\Admin\AppData\Local\Temp\Enq No.BPC-9840117.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3636 -s 11162⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3580-9-0x00000000047F0000-0x00000000047F1000-memory.dmp
memory/3636-2-0x0000000073BA0000-0x000000007428E000-memory.dmp
memory/3636-3-0x0000000000860000-0x0000000000861000-memory.dmp
memory/3636-5-0x00000000055F0000-0x00000000055F1000-memory.dmp
memory/3636-6-0x00000000051D0000-0x00000000051D1000-memory.dmp
memory/3636-7-0x0000000005330000-0x0000000005331000-memory.dmp
memory/3636-8-0x0000000005400000-0x0000000005401000-memory.dmp