Analysis
-
max time kernel
16s -
max time network
70s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
26-06-2021 18:29
General
-
Target
kronos.exe
-
Size
429KB
-
MD5
de9ab737905e09b69b28dc0999d08894
-
SHA1
9278a2cf97b5bd635d9950cab38afc3f82558506
-
SHA256
ffc1cfe4cfa36477ead629bd1a2c6ffb266502c3261b85de431137da411320a8
-
SHA512
698c4d119dd35fe3dc62e824d175374f9eb41925df7931b78cd33b96137b7d99f76f19889f4ca716bc3719b77d089b1772001028410473fb09d64462c08c680e
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\kronos.exe"C:\Users\Admin\AppData\Local\Temp\kronos.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\kronos.exe"C:\Users\Admin\AppData\Local\Temp\kronos.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 4883⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
8KB
-
-
Filesize
320KB
-
Filesize
320KB