Analysis
-
max time kernel
90s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20220331-en -
submitted
01-04-2022 04:53
General
-
Target
ead17dee70549740a4e649a647516c140d303f507e0c42ac4b6856e6a4ff9e14.exe
-
Size
1.5MB
-
MD5
05d3edc56331ce405e49ad2fc4e6c01e
-
SHA1
0b0491f9b654bb0bc41929456ba2943141be6711
-
SHA256
ead17dee70549740a4e649a647516c140d303f507e0c42ac4b6856e6a4ff9e14
-
SHA512
b83c1d21147dce1eaadc5d066c0913ab2f08d1a97c34ffb2f4ee685d7f35979c3894b86bd4c2f470c0ae416aac3d9f57fe9d201721bdca2a64fbb9fff7857e26
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ead17dee70549740a4e649a647516c140d303f507e0c42ac4b6856e6a4ff9e14.exe"C:\Users\Admin\AppData\Local\Temp\ead17dee70549740a4e649a647516c140d303f507e0c42ac4b6856e6a4ff9e14.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 920 -s 19722⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 424 -p 920 -ip 9201⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB