Analysis
-
max time kernel
84s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220331-en -
submitted
01-04-2022 04:52
General
-
Target
71edf6e4460d3eaf5f385610004cfd68d1a08b753d3991c6a64ca61beb4c673a.exe
-
Size
1.5MB
-
MD5
bcb90ad9d64c26c3fc5d259a5fe57f15
-
SHA1
b1d565021362259003da96566b46cf42566f1808
-
SHA256
71edf6e4460d3eaf5f385610004cfd68d1a08b753d3991c6a64ca61beb4c673a
-
SHA512
133628db136751e4f8c6419e377b8dc68d0f4bc1018c0d1eec798a4b38e486c4138c869f312046a6ddc31db4d4359e10e38d5e24ad1b649057a260a61b7f2131
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\71edf6e4460d3eaf5f385610004cfd68d1a08b753d3991c6a64ca61beb4c673a.exe"C:\Users\Admin\AppData\Local\Temp\71edf6e4460d3eaf5f385610004cfd68d1a08b753d3991c6a64ca61beb4c673a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3608 -s 7122⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 3608 -ip 36081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB