Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 04:14
General
-
Target
a2c38035183bd2377ed4baec12f239b676db2431e140236fc2b8b35a3996e122.exe
-
Size
1.3MB
-
MD5
3784bbde91dcdcf8668fcf78e711b05b
-
SHA1
73d46f795e10c127e644b13759996eeb434903f5
-
SHA256
a2c38035183bd2377ed4baec12f239b676db2431e140236fc2b8b35a3996e122
-
SHA512
5abe505082bd6a71fccb63daaa5ee017b0e43e98ef4afffbda725a3aa12ace17973b79b285f5634a5bcc5fed66591054e5fade0d9b2dc77780d66b3db25b5516
-
SSDEEP
24576:LRXRRRRRRRRRRRRRRRRRRRRRRRRRRRRRgVQ6yJcyIHr9xTjoEIzOdoa8iPLDSVXv:LA+JcyarTX/ZxPYXT5Xld3hGCf1P
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2c38035183bd2377ed4baec12f239b676db2431e140236fc2b8b35a3996e122.exe"C:\Users\Admin\AppData\Local\Temp\a2c38035183bd2377ed4baec12f239b676db2431e140236fc2b8b35a3996e122.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4768 -s 16562⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 4768 -ip 47681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
183KB
MD589be6ada38bfd0694df5f5dbd3901201
SHA17a7b4c535fbdb645d6017961941b342f89d1ac68
SHA256a1d0ea64f13c103d36f27298bc117973224634fba2da416feb0074aa320ff65f
SHA51202b9144c699e43559ecca88cb0a8ff6314a8cf455cb61dbcd897ca43e0e3293c52b78904cff270c5270fa92e180c86643d98dfd1218a18df4c997542802758a4
-
Filesize
208KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB