Analysis
- max time kernel
15s - max time network
121s - platform
windows10_x64 - resource
win10v20210408 - submitted
04/09/2021, 18:53
General
- Target 69c6dc807de5ad142552329810315eb1.exe
- Size 626KB
- Sample210904-xjmcjaede5
- SHA256 3aaec800b59847bf0d3f690efaaa5a33ae817e873c7a6b545ee00587dfc6b0e5
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious behavior: EnumeratesProcesses 14 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\69c6dc807de5ad142552329810315eb1.exe"C:\Users\Admin\AppData\Local\Temp\69c6dc807de5ad142552329810315eb1.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 776 -s 11122⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/776-114-0x00000000001A0000-0x00000000001A1000-memory.dmp
memory/776-116-0x0000000004A50000-0x0000000004AA6000-memory.dmp
memory/776-117-0x0000000008FD0000-0x0000000008FD1000-memory.dmp
memory/776-118-0x0000000009570000-0x0000000009571000-memory.dmp
memory/776-119-0x0000000004CF0000-0x0000000004CF1000-memory.dmp
memory/776-120-0x0000000002570000-0x0000000002571000-memory.dmp
memory/776-121-0x0000000004E50000-0x0000000004E51000-memory.dmp
memory/776-122-0x0000000004AE0000-0x0000000004AE1000-memory.dmp