Overview

overview

10

Static

static

8

1667e16357...43.exe

windows7_x64

3

1667e16357...43.exe

windows10_x64

3

17139a10fd...61.exe

windows7_x64

10

17139a10fd...61.exe

windows10_x64

10

1cc7c198a8...cb.exe

windows7_x64

10

1cc7c198a8...cb.exe

windows10_x64

10

243dff06fc...60.exe

windows7_x64

10

243dff06fc...60.exe

windows10_x64

10

27214dcb04...8f.exe

windows7_x64

10

27214dcb04...8f.exe

windows10_x64

10

3dabd40d56...a6.exe

windows7_x64

3

3dabd40d56...a6.exe

windows10_x64

3

43e61519be...aa.exe

windows7_x64

10

43e61519be...aa.exe

windows10_x64

10

48a848bc9e...3a.exe

windows7_x64

10

48a848bc9e...3a.exe

windows10_x64

10

508dd6f7ed...dd.exe

windows7_x64

10

508dd6f7ed...dd.exe

windows10_x64

10

516664139b...4b.exe

windows7_x64

10

516664139b...4b.exe

windows10_x64

10

533672da9d...8d.exe

windows7_x64

10

533672da9d...8d.exe

windows10_x64

10

6228f75f52...ff.exe

windows7_x64

10

6228f75f52...ff.exe

windows10_x64

10

6836ec8588...d8.exe

windows7_x64

3

6836ec8588...d8.exe

windows10_x64

3

68872cc22f...e7.exe

windows7_x64

10

68872cc22f...e7.exe

windows10_x64

10

691515a485...a5.exe

windows7_x64

10

691515a485...a5.exe

windows10_x64

10

78782fd324...34.exe

windows7_x64

1

78782fd324...34.exe

windows10_x64

10

Resubmissions

27-01-2024 19:37

240127-yb5pksafd3 10

27-01-2024 19:36

240127-ybqwesafc2 10

12-05-2021 15:56

210512-db4t7vmwas 10

Analysis

  • max time kernel
    116s
  • max time network
    119s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    12-05-2021 15:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe

  • Size

    40KB

  • MD5

    1a700f845849e573ab3148daef1a3b0b

  • SHA1

    c91ff86a88038b00d9190ebb01e6f8c94b0c83e0

  • SHA256

    1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43

  • SHA512

    d7fcf0ef26bbe1d6104c098711ccdfd33655e62045f6975dd3c48ab34888c83b771dfd07682004943bab86b2dbcb7905364becead09c37de3da0b28e8265dc81

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe
    "C:\Users\Admin\AppData\Local\Temp\1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe"
    1⤵
      PID:3048
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 224
        2⤵
        • Program crash
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:2400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads