Analysis
-
max time kernel
300s -
max time network
300s -
platform
windows7_x64 -
resource
win7-en-20211104 -
submitted
03-12-2021 16:56
General
-
Target
RFQ- WORKTOP -FINTD-RT-18-193-R0.exe
-
Size
215KB
-
MD5
057c210911045f8f4a62ff3cacc31829
-
SHA1
8f779ff6231c764901c16e688bc44aba69acb5f5
-
SHA256
e278e44869b4560ae8cab37e0d71ef79ede0f73a5b4176ce04db3c2818cec336
-
SHA512
f6c55d0440e3a8b6614ddf4b0ae218d01ae283c58fae6eaafb90be74b8edbc1bb685169a5139f21c638290b1241078237ec356ea472113c6e8889f092f1500ff
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RFQ- WORKTOP -FINTD-RT-18-193-R0.exe"C:\Users\Admin\AppData\Local\Temp\RFQ- WORKTOP -FINTD-RT-18-193-R0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exedw20.exe -x -s 5202⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB