Analysis
-
max time kernel
86s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
03-09-2023 07:38
General
-
Target
cd3ed5855569c916f25884fbae87e55db08f61ed8de4b4f6a405cb139f42a3d9.exe
-
Size
1.3MB
-
MD5
e9c68b391e59c884799737a0c94e13f2
-
SHA1
d47af52d763d275589a6358074ba344f0aec1221
-
SHA256
cd3ed5855569c916f25884fbae87e55db08f61ed8de4b4f6a405cb139f42a3d9
-
SHA512
121370e11896ec7b30d4aa0d470400af788a52c923f8d96ffdfcfa78d3229161d75c63dc3f6567b34314f47bd84b321a7428872ccef9ce8ccd8a2f90524a163f
-
SSDEEP
24576:TdE0L4Isngy5Z1hLercU0oLMvSr7WbJ7rDS0slQctBZy:vL+nb73LpUJWV7CpzU
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd3ed5855569c916f25884fbae87e55db08f61ed8de4b4f6a405cb139f42a3d9.exe"C:\Users\Admin\AppData\Local\Temp\cd3ed5855569c916f25884fbae87e55db08f61ed8de4b4f6a405cb139f42a3d9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4936 -s 11602⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4936 -s 12002⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4936 -ip 49361⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 524 -p 4936 -ip 49361⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB