Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12/02/2024, 22:42
General
-
Target
SecuriteInfo.com.Trojan.Mardom.MN.11.14213.exe
-
Size
107KB
-
MD5
4c786cd63fac06fced00021871bbcb26
-
SHA1
252e34939f1b170c405dfcb9e71af81fd4d46a76
-
SHA256
6cb4b76443951f62956f377295d460a7c8515bb62f0e193f564331f851ef4e11
-
SHA512
48a9d738930628784e1ebedd1c6c101e86ca7f56569bda522c8570a616bd882a44ccf4dd10b29af3691a3531b28d5ce2cebc3bea1aca8df419f43ad4ce840682
-
SSDEEP
3072:5nu8CPowC/b14+OpfW2thZ5FxlKHXkrp:5uHPoDk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Mardom.MN.11.14213.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Mardom.MN.11.14213.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 10802⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB