Analysis
-
max time kernel
106s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
14-09-2022 13:43
General
-
Target
ConsoleApp2.exe
-
Size
60.7MB
-
MD5
3a7f17b96ac48866e839a5ed6309f28e
-
SHA1
627445f50f378d9b98c0cbdd78b6d739b2b6aafd
-
SHA256
3b6e0479880126522df76334339c7c1aa71b2c5a2670ff76216f7038b6aa456c
-
SHA512
14912979fd5a2041de3a4064b8c6a3893b88d2336c94abe13969fd20231e72eedd132ba359ba299750c2bc70c7017cee76541d65871f3e1ac8e7d2453ec56928
-
SSDEEP
393216:y1BQsNPGl5wkXCbxD5xs4QXO5slAYhQKrtGldEYJpoMbYwbUfIW21nRNX9WbXJ7Z:60GoMlNJpoMbPW21n7wV7eGL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ConsoleApp2.exe"C:\Users\Admin\AppData\Local\Temp\ConsoleApp2.exe"1⤵
-
C:\Windows\system32\osk.exe"C:\Windows\system32\osk.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f0 0x4ec1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 472 -p 4200 -ip 42001⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4200 -s 24801⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.1MB
-
Filesize
152KB
-
Filesize
1.4MB
-
Filesize
76KB
-
Filesize
340KB
-
Filesize
208KB
-
Filesize
248KB
-
Filesize
256KB
-
Filesize
60KB
-
Filesize
96KB
-
Filesize
1.7MB
-
Filesize
52KB
-
Filesize
240KB
-
Filesize
36KB
-
Filesize
664KB
-
Filesize
472KB
-
Filesize
100KB
-
Filesize
368KB