Analysis
-
max time kernel
104s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
29/03/2023, 15:49
General
-
Target
bbe72f6ae9761c344b9106b4fbafeb7a91c06cef25b28de74aebbd73c4d0e935.exe
-
Size
9KB
-
MD5
79f1ca2842d090c7cfaddcc552577544
-
SHA1
326cef01a8a6393394453292f09e7f53cfb14768
-
SHA256
bbe72f6ae9761c344b9106b4fbafeb7a91c06cef25b28de74aebbd73c4d0e935
-
SHA512
e5eb7288c222a7ba88de12b82d03ff690c82b2dab78a8541652bf3646cd77b20e841521b53542656daa280dd29f4512231443a44fa88a2c4c007bc0863caaf19
-
SSDEEP
192:0Bksuv9MuICgeMZZ3C93VnjdwqzH3RJ7J:ll/geMOFnhwqThJ7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bbe72f6ae9761c344b9106b4fbafeb7a91c06cef25b28de74aebbd73c4d0e935.exe"C:\Users\Admin\AppData\Local\Temp\bbe72f6ae9761c344b9106b4fbafeb7a91c06cef25b28de74aebbd73c4d0e935.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1828 -s 13802⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 1828 -ip 18281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
64KB
-
Filesize
64KB