Analysis
-
max time kernel
128s -
max time network
120s -
platform
windows7_x64 -
resource
win7-en-20210920 -
submitted
11-10-2021 08:21
General
-
Target
f76bc0e1dd77808d3668b3a169155dec.exe
-
Size
13KB
-
MD5
f76bc0e1dd77808d3668b3a169155dec
-
SHA1
d4770ddfa3bff74a0b9c00d6acecc87d60212fe1
-
SHA256
34acd51df743b093c9eda93ebf46db0095fe2bdd4ee58d18c65e8914790f337d
-
SHA512
88339524423173ac21397e8c005f95202cff111130a139e8268c9fdc3302748fd818c8990062dd2b5fa07d3dc9ad6cc7b4fcc20b3717e7ff1c1f5d982a795aec
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f76bc0e1dd77808d3668b3a169155dec.exe"C:\Users\Admin\AppData\Local\Temp\f76bc0e1dd77808d3668b3a169155dec.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 612 -s 16042⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
-
Filesize
4KB