91ecd3092e58361a48a096d844f1846f5e6ca76b5091e9499ed3b4c3fbe28a3d

Resubmissions

03/06/2023, 21:00

03/06/2023, 20:57

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
03/06/2023, 20:57

Target

TGX.exe
Size

686KB
MD5

44a4e3d019880eab7d1cc7fe50400227
SHA1

c0e60962bf5dcd8d47bfa6aec07917a13fed86bf
SHA256

91ecd3092e58361a48a096d844f1846f5e6ca76b5091e9499ed3b4c3fbe28a3d
SHA512

622a6ad80c6b357e46e3428311584584d3329d69f46b7c44c31c1083f3fbe9e859da5259784600d5260dfa3ea836fbb02c80c8070e13ba7936d1b273c2c17e38
SSDEEP

12288:21IytQVxkI3A9VWcTkRe4n5yxmrKLR/mYbkDo44NTPqyiRr1JY1ay7nmGQ6:EZqJyxmrKLVmYdqr1Swy7ni6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
636	1644	WerFault.exe	27

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1644	TGX.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 636	1644	TGX.exe	30
PID 1644 wrote to memory of 636	1644	TGX.exe	30
PID 1644 wrote to memory of 636	1644	TGX.exe	30
PID 1644 wrote to memory of 636	1644	TGX.exe	30

C:\Users\Admin\AppData\Local\Temp\TGX.exe
"C:\Users\Admin\AppData\Local\Temp\TGX.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 1712
  2⤵
  - Program crash
  PID:636

memory/1644-54-0x0000000001080000-0x0000000001130000-memory.dmp

Filesize
704KB

Download
memory/1644-55-0x0000000004D40000-0x0000000004D80000-memory.dmp

Filesize
256KB

Download
memory/1644-56-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download
memory/1644-57-0x0000000004D80000-0x0000000004EC6000-memory.dmp

Filesize
1.3MB

Download
memory/1644-58-0x0000000000570000-0x000000000057A000-memory.dmp

Filesize
40KB

Download
memory/1644-59-0x0000000000570000-0x000000000057A000-memory.dmp

Filesize
40KB

Download