Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
14-03-2024 09:49
General
-
Target
c8518eded0779e65a8b09b4c0ff35f21.exe
-
Size
217KB
-
MD5
c8518eded0779e65a8b09b4c0ff35f21
-
SHA1
96a8f75aa8dde1ec7b398c78973b4a1c90fd3c58
-
SHA256
4769d8b513e7bdea0a1b93863da24e89cc5dffa1864ad2c34a4f87976f0e203c
-
SHA512
47d64b10e7d5c974e5441ac6e00480720e0f3f6a181165464c8c6a9ca57be25af8f6def85e5b070e748ecdf9af0311c8f026391531b40de4d9af32807308cc35
-
SSDEEP
3072:TAuiq7KEgtW+yClLsH8AWauWZv3ID+BFo3Nj/r6f4e8RN6hSklVYqxFV9GqpYuo2:z7KFE+VVg5RcNLmhlVZ6qpYuoCwROr
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8518eded0779e65a8b09b4c0ff35f21.exe"C:\Users\Admin\AppData\Local\Temp\c8518eded0779e65a8b09b4c0ff35f21.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c8518eded0779e65a8b09b4c0ff35f21.exe"C:\Users\Admin\AppData\Local\Temp\c8518eded0779e65a8b09b4c0ff35f21.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 208 -s 2283⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 208 -ip 2081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
5.7MB