Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
01-11-2023 06:16
General
-
Target
hareketleriniz.pdf.exe
-
Size
25KB
-
MD5
c9303344ad8835a85fc0b2a09e01f573
-
SHA1
18adb6199034985533754d12cf2980ec2d5b71f4
-
SHA256
7284a7a47a6c2aa97dddd4b8eb7a04e285e2d36aab49d1564421be0c7a6d8f8a
-
SHA512
9607a276f72dcdb6103efdbc6a894eaf8413722830d9656070461085f4312b3f001c0862595596a3baa42827ff3458d4453bbea4ce111e6c0c733733146339c2
-
SSDEEP
384:79ZyyYEaGmLV8SwFtiOUo9U2QuW2APL6yRqtxAx+roEOsVK/KO+sB6fy:poy11YwXuZHuNs3RqtGx+roAYP+96
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\hareketleriniz.pdf.exe"C:\Users\Admin\AppData\Local\Temp\hareketleriniz.pdf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1732 -s 11722⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB