Analysis
-
max time kernel
92s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
24-02-2024 12:52
General
-
Target
SwiftPOS.Advertising.exe
-
Size
1.6MB
-
MD5
cc2be3f9d1069cd33e9ef19337feac00
-
SHA1
7fdc9d26174a12e3a8ddbb99d2dc5e989902a2ea
-
SHA256
9e29c2ace0848712f41e6f3e4cbf1d894aa860cc774c8a622f55883c235d5a56
-
SHA512
a56d3dfcd9139c6842026ddba5697fbada49e0b2e9b0b74b1e13ba12ecde59f8bd8e2d3111c4bd1239fadb1db8f456b0ae024f5c1bdac5072d7d59cbec56d6c8
-
SSDEEP
24576:HdvxxLF6WvX2BLGJsPk9tro9OYI2QKv18Y5xP/OdgX:JjPiGJsPk9tUI2TvnzP/OW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SwiftPOS.Advertising.exe"C:\Users\Admin\AppData\Local\Temp\SwiftPOS.Advertising.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3276 -s 12162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3276 -ip 32761⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
624KB
-
Filesize
584KB
-
Filesize
5.6MB
-
Filesize
40KB
-
Filesize
344KB
-
Filesize
7.7MB