Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
01-12-2021 14:17
General
-
Target
FedEx Shipping documents.exe
-
Size
586KB
-
MD5
effcf5955cebbeb7a830ca594140c3b6
-
SHA1
e7fef6117f1b2aa096c7d8c1eefc5b95a5ff98b3
-
SHA256
bf918a307f306ab901fe1846aee351aa18e51920d45a908339a5eb95a6466ca4
-
SHA512
549ec0a6cf89507510002b74ded5bbb239e5d40d744acb184e2378b83d7b4079468e8b0653408f71f36df945425e19eff37de3b6630d05c13192474490746d6b
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FedEx Shipping documents.exe"C:\Users\Admin\AppData\Local\Temp\FedEx Shipping documents.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1092 -s 6642⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
24KB
-
Filesize
272KB