Analysis
- max time kernel
121s - max time network
121s - platform
windows10_x64 - resource
win10-en-20211104 - submitted
25/11/2021, 08:43
General
- Target REVISED_Document_NEW_PROJECT-02826626212.exe
- Size 742KB
- Sample211125-kmk8esefeq
- SHA256 d72cdc46d9480840091aa1f842f0e2dd1d44c9b7d6ebf2b8ac8e6491bfcba92c
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious behavior: EnumeratesProcesses 12 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\REVISED_Document_NEW_PROJECT-02826626212.exe"C:\Users\Admin\AppData\Local\Temp\REVISED_Document_NEW_PROJECT-02826626212.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 7922⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3476-118-0x0000000000170000-0x0000000000171000-memory.dmp
memory/3476-120-0x0000000004EE0000-0x0000000004EE1000-memory.dmp
memory/3476-121-0x0000000004A80000-0x0000000004A81000-memory.dmp
memory/3476-122-0x00000000049E0000-0x0000000004EDE000-memory.dmp