Overview

overview

1

Static

static

xciwFNwa.exe

windows7_x64

1

xciwFNwa.exe

windows10_x64

1

Analysis

  • max time kernel
    149s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    21-04-2021 22:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xciwFNwa.exe

  • Size

    43KB

  • MD5

    38f82aa6974cca82305f9aadaef3d00b

  • SHA1

    00998492c954a131596a73197a915d398dc95e17

  • SHA256

    b398793e41d0967c767cba72395d7f167aac8df49ce3788c0d657b78f04e2cea

  • SHA512

    8c498b5591f41f3f2238d22f174d1c8e6d6c837f2dde1c31bfb2f27348fc6dd9c99386dbea799df876f2073c3afd71f0f9c73b4b3ea868ffc372bcecef8c1472

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xciwFNwa.exe
    "C:\Users\Admin\AppData\Local\Temp\xciwFNwa.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    PID:108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/108-60-0x0000000000810000-0x0000000000811000-memory.dmp
    Filesize

    4KB

    Download
  • memory/108-62-0x0000000004CB0000-0x0000000004CB1000-memory.dmp
    Filesize

    4KB

    Download