Overview

overview

10

Static

static

8

1667e16357...43.exe

windows7_x64

3

1667e16357...43.exe

windows10_x64

3

17139a10fd...61.exe

windows7_x64

10

17139a10fd...61.exe

windows10_x64

10

1cc7c198a8...cb.exe

windows7_x64

10

1cc7c198a8...cb.exe

windows10_x64

10

243dff06fc...60.exe

windows7_x64

10

243dff06fc...60.exe

windows10_x64

10

27214dcb04...8f.exe

windows7_x64

10

27214dcb04...8f.exe

windows10_x64

10

3dabd40d56...a6.exe

windows7_x64

3

3dabd40d56...a6.exe

windows10_x64

3

43e61519be...aa.exe

windows7_x64

10

43e61519be...aa.exe

windows10_x64

10

48a848bc9e...3a.exe

windows7_x64

10

48a848bc9e...3a.exe

windows10_x64

10

508dd6f7ed...dd.exe

windows7_x64

10

508dd6f7ed...dd.exe

windows10_x64

10

516664139b...4b.exe

windows7_x64

10

516664139b...4b.exe

windows10_x64

10

533672da9d...8d.exe

windows7_x64

10

533672da9d...8d.exe

windows10_x64

10

6228f75f52...ff.exe

windows7_x64

10

6228f75f52...ff.exe

windows10_x64

10

6836ec8588...d8.exe

windows7_x64

3

6836ec8588...d8.exe

windows10_x64

3

68872cc22f...e7.exe

windows7_x64

10

68872cc22f...e7.exe

windows10_x64

10

691515a485...a5.exe

windows7_x64

10

691515a485...a5.exe

windows10_x64

10

78782fd324...34.exe

windows7_x64

1

78782fd324...34.exe

windows10_x64

10

Resubmissions

27-01-2024 19:37

240127-yb5pksafd3 10

27-01-2024 19:36

240127-ybqwesafc2 10

12-05-2021 15:56

210512-db4t7vmwas 10

Analysis

  • max time kernel
    110s
  • max time network
    114s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    12-05-2021 15:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe

  • Size

    40KB

  • MD5

    1c33dc87c6fdb80725d732a5323341f9

  • SHA1

    0aea126a9d01fc5faf06314529b4ff06fdc6f8cd

  • SHA256

    6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8

  • SHA512

    50f915e355e66c264d1eaad3bda01034c99ddc8fdc78b03c653ef0ccb4a250e3d892c3b6131fd153c5b73b0ab7c6649c8465ff8dc02f42efb050f8f76906197b

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe
    "C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe"
    1⤵
      PID:3148
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3148 -s 228
        2⤵
        • Program crash
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1660

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads