Analysis
-
max time kernel
111s -
max time network
163s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
24-09-2021 10:27
General
-
Target
463b34821a8eb219ff5980787d95bc2cfdd2d7f82720163394973814cd5dfe40.exe
-
Size
125KB
-
MD5
f9bf85cfb68d9e5f68bbccaf683af15c
-
SHA1
a2eae8c1350fcfa429d2af664d8320edbfabe5d3
-
SHA256
463b34821a8eb219ff5980787d95bc2cfdd2d7f82720163394973814cd5dfe40
-
SHA512
07032679f19bba5690b59a6b689859d0b3611995cca6f990d2eee4b2f586493b29e70b4525e057abefe79a86695fa934f52e175a12098e0eeef7c1e3d049066a
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\463b34821a8eb219ff5980787d95bc2cfdd2d7f82720163394973814cd5dfe40.exe"C:\Users\Admin\AppData\Local\Temp\463b34821a8eb219ff5980787d95bc2cfdd2d7f82720163394973814cd5dfe40.exe"1⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2492 -s 1522⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken