Analysis
-
max time kernel
52s -
max time network
264s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
16-10-2022 10:56
General
-
Target
65d79bcb58181b00759331f73e95c8eb2f1f44727f8073e09facb3994a2d1ef2.exe
-
Size
3.4MB
-
MD5
48fb8c36c0b9b03ccb49d9e4387fc0de
-
SHA1
cff8a2e11db4326d0dc58cab66da1cf9cc806b99
-
SHA256
65d79bcb58181b00759331f73e95c8eb2f1f44727f8073e09facb3994a2d1ef2
-
SHA512
9d439b057fd65f49d5d7a52f446734464d347ace672724664d163a66cd4fca7967717d2ec930ec518d3212a9e0c822e31c5ec39097d77d7166ecd11a81601985
-
SSDEEP
98304:1U3BhUKvDlARLczii8hKNIBFeKpAoVDkMQ26uYEAZVnXlTv:1KB/vDSRLcuFheCFLpvql2fOnXlb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65d79bcb58181b00759331f73e95c8eb2f1f44727f8073e09facb3994a2d1ef2.exe"C:\Users\Admin\AppData\Local\Temp\65d79bcb58181b00759331f73e95c8eb2f1f44727f8073e09facb3994a2d1ef2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3900 -s 18202⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.4MB
-
Filesize
2.9MB
-
Filesize
2.8MB
-
Filesize
2.1MB
-
Filesize
72KB
-
Filesize
4.8MB
-
Filesize
1.9MB
-
Filesize
1.9MB