Analysis
-
max time kernel
115s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
22/03/2023, 18:59
General
-
Target
yeni sipariş111.exe
-
Size
1.0MB
-
MD5
24a3498d1eafb3d3a54b7613abb6224d
-
SHA1
0ef31555c3a8f914d97da32895402ed84ee98e22
-
SHA256
f4e6a61d2e8cd7651788e61c8b5c9fb36df48373adec1b1e875ff10adca28b90
-
SHA512
c01e5f774845f426b0246726118ad9dfcbe6b74d6e968a2bf84727e855c7daf995f02e470e64415806a2573cce9095cfedbc1c664eff32cf6870bd971d4d858d
-
SSDEEP
12288:pcWAYsHRlYf4iZFntEXrGAef9iMmx9Akm5fvuoKKyPJlSECfad0E3qAw:oRlNiZ9tEXo9s9Akm5XhKBCEcad0E/
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\yeni sipariş111.exe"C:\Users\Admin\AppData\Local\Temp\yeni sipariş111.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3116 -s 11562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3116 -ip 31161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
624KB