Analysis
-
max time kernel
120s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
14/10/2023, 01:56
General
-
Target
Siparişi_(PO4035247)_Sentes-BIR A.S..exe
-
Size
807KB
-
MD5
a033a6b1d64b85a9158d8d384b444f37
-
SHA1
5a05ae30c6d247c36c1b31181222bac3a6e92058
-
SHA256
34d90abc5ce0bb8fd7e52b762182968170955b06aa02df633f58a85d9a0846f3
-
SHA512
5ddfef36321381e643c0cc56470a599a76ff00e288ee0621a8423a63f606721d475386131ca5e1d2cd4292bf3c52a4094c71c9bad8b4784ca1f27abc1781571d
-
SSDEEP
12288:V2AvLRyQn+rwDoPa/p0ahIEukyL3ENtu5nq4pA/:V2qLoUOELuky2tOnk/
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Siparişi_(PO4035247)_Sentes-BIR A.S..exe"C:\Users\Admin\AppData\Local\Temp\Siparişi_(PO4035247)_Sentes-BIR A.S..exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 19602⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 19762⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2272 -ip 22721⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2272 -ip 22721⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
832KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
64KB
-
Filesize
7.7MB