Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
04-05-2023 22:46
General
-
Target
pivot_v5-1.exe
-
Size
572KB
-
MD5
b1317c427fb2e609e50f66a8d92c0c14
-
SHA1
6e3e55c199f9a41a2c0d816fe5ee8f5cb59b0dfa
-
SHA256
f6c1a4438653205845a1d64654b60b31f92e58ff2592e3d427d056d5da4507c5
-
SHA512
d2c8349f64ffc18428f2d878ddfa451a3026a403fb58707e2c625e78f2067b3daea071da4dff1ab3a16014e3d9a1eb8a109185c4479b89e77507b3cbe6b3823f
-
SSDEEP
12288:mftU8otA3z0tuuJQX0pfd5Ehl3q8Opfje99QMtpf5v:my853z0tuuJQXOl5Ehl3q/CGMDRv
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pivot_v5-1.exe"C:\Users\Admin\AppData\Local\Temp\pivot_v5-1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4992 -s 12962⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 4992 -ip 49921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
584KB
-
Filesize
5.2MB
-
Filesize
64KB
-
Filesize
320KB
-
Filesize
712KB
-
Filesize
72KB
-
Filesize
128KB
-
Filesize
200KB
-
Filesize
120KB
-
Filesize
104KB
-
Filesize
64KB
-
Filesize
64KB