Analysis
-
max time kernel
33s -
max time network
116s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
12-05-2021 19:34
General
-
Target
6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe
-
Size
40KB
-
MD5
1c33dc87c6fdb80725d732a5323341f9
-
SHA1
0aea126a9d01fc5faf06314529b4ff06fdc6f8cd
-
SHA256
6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8
-
SHA512
50f915e355e66c264d1eaad3bda01034c99ddc8fdc78b03c653ef0ccb4a250e3d892c3b6131fd153c5b73b0ab7c6649c8465ff8dc02f42efb050f8f76906197b
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe"C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1692 -s 2242⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken