Analysis
- max time kernel
150s - max time network
183s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
09/01/2024, 17:04
General
- Target 4edee6d529a130631d0e60d3b0e01145.exe
- Size 211KB
- Sample240109-vlkwdaeefm
- SHA256 a9a5edaeb8c719dffba984ddafe7aabb71d7d49582a097bf7d1f5040f930e70c
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4edee6d529a130631d0e60d3b0e01145.exe"C:\Users\Admin\AppData\Local\Temp\4edee6d529a130631d0e60d3b0e01145.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 10002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2220 -ip 22201⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2220-0-0x0000000000900000-0x000000000093C000-memory.dmp
memory/2220-1-0x00000000747A0000-0x0000000074F50000-memory.dmp
memory/2220-3-0x0000000005230000-0x0000000005231000-memory.dmp
memory/2220-2-0x0000000005440000-0x0000000005450000-memory.dmp
memory/2220-4-0x00000000052A0000-0x00000000052C2000-memory.dmp
memory/2220-5-0x0000000005380000-0x00000000053BC000-memory.dmp
memory/2220-6-0x00000000747A0000-0x0000000074F50000-memory.dmp