Analysis
- max time kernel
31s - max time network
39s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
08/03/2024, 04:33
General
- Target 39245735a6a4d2495cb6a5207bb9d5e2b6c058d113b6b0efc292330a89611757.exe
- Size 47KB
- Sample240308-e6z8ssgb8w
- SHA256 39245735a6a4d2495cb6a5207bb9d5e2b6c058d113b6b0efc292330a89611757
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\39245735a6a4d2495cb6a5207bb9d5e2b6c058d113b6b0efc292330a89611757.exe"C:\Users\Admin\AppData\Local\Temp\39245735a6a4d2495cb6a5207bb9d5e2b6c058d113b6b0efc292330a89611757.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2116 -s 9522⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2116-0-0x0000000000F00000-0x0000000000F0E000-memory.dmp
memory/2116-1-0x000007FEF5E80000-0x000007FEF686C000-memory.dmp
memory/2116-2-0x000000001B190000-0x000000001B210000-memory.dmp
memory/2116-3-0x000007FEF5E80000-0x000007FEF686C000-memory.dmp