Analysis
-
max time kernel
103s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
07/03/2023, 12:26
General
-
Target
REVİZE EDİLMİŞ TEKLİF VE SATIN ALMA EMRİ.exe
-
Size
1.2MB
-
MD5
000eacef2e4254e30b09a9e4b683d009
-
SHA1
2150c7fc34a86887f6b5ad520d66e9ab9727df64
-
SHA256
d3277817e3f5dd9265d3797ceb8db5316f75c7f708f9ba2186d8380c7a6530c1
-
SHA512
53a86d0e575c95f40942f2c7bdf1477c42cac0375a6fa49c8a513cfdebb1b0f45dfaf83b1e021679b2c79a65ceab83399429caf334e662fd482fd361b62dfefa
-
SSDEEP
24576:D0YNUK616VPsqYoK3qoUUUhJH0PqkqBp:PNJiSpYoUqoGhJLX
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\REVİZE EDİLMİŞ TEKLİF VE SATIN ALMA EMRİ.exe"C:\Users\Admin\AppData\Local\Temp\REVİZE EDİLMİŞ TEKLİF VE SATIN ALMA EMRİ.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 12082⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4656 -ip 46561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
624KB