Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11/05/2023, 01:10
General
-
Target
9666bcc542cbc13280681782c1e7971429564c138f9f4fd5d3dbd187104c9e85.exe
-
Size
505KB
-
MD5
33ee0bb76f93a82bbab5fd4b2a903291
-
SHA1
a31a0f9bea721f98665a0f55987f77c0ef2f2b10
-
SHA256
9666bcc542cbc13280681782c1e7971429564c138f9f4fd5d3dbd187104c9e85
-
SHA512
c8002bfa4894c9140116c6901a6d8a968ac8e071110dc41c73242721a2e1aa8874016ef3025ab9a6fd3f580aa6d87124f06377114fb694a9e7470034378f34a0
-
SSDEEP
12288:Vh/mWk/ViDzpt1r8iOhVju0xw9awVdopE:X/mLitrKaf9awbopE
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9666bcc542cbc13280681782c1e7971429564c138f9f4fd5d3dbd187104c9e85.exe"C:\Users\Admin\AppData\Local\Temp\9666bcc542cbc13280681782c1e7971429564c138f9f4fd5d3dbd187104c9e85.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1128 -s 10322⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1128 -ip 11281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
520KB
-
Filesize
64KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
4KB