Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
14/06/2023, 20:19
General
-
Target
SwiftPOS.Reservations.exe
-
Size
764KB
-
MD5
8654d74d109430d9dea3a180f49e6943
-
SHA1
6a5df40ac09a4d1962db30219652412d9fafbc55
-
SHA256
517b60bd8eadf909a2d0c376010dab348cf247f8cd8678ba7f41232e5dbd944a
-
SHA512
e597da38918d205d2fce1b171aeab2886b93cfe52a91c9372945e6d5773ab01ccbddffb8ae135205c1265aee77b8e7aa514c3761071882bbec6e49f33252ae86
-
SSDEEP
12288:9BR5MfXcKupvmKeAYqjEw/Z5kNJgFw2z1UANLLzFe67K/+dWIsIg:9/xCqD/ZQgFwAbF1e/BRp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SwiftPOS.Reservations.exe"C:\Users\Admin\AppData\Local\Temp\SwiftPOS.Reservations.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 12362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4260 -ip 42601⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
768KB
-
Filesize
624KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
344KB