c94ed463f55d967c0fb21e6e52efd3e94d0ad792e9d965f275265d6e5a285ea8

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 13:11

Target

InikaaurHB38BXW.exe
Size

650KB
MD5

05d1c2995d41bfae991c4593ebcaeb53
SHA1

5bd1f44267d82e2255b7c035d05d38e44c7b3261
SHA256

c94ed463f55d967c0fb21e6e52efd3e94d0ad792e9d965f275265d6e5a285ea8
SHA512

2ea6abbd946ad7b5175d18e192e1e82606e7cc067d39c430aa4b8af7bca31acf055d34803bd6470d2c25650ab29f9ab07ebea76f21e6a80486bf974fcf7e3a11
SSDEEP

12288:AaAv3zT370X1fouNe8Gqr1j2tGosPCo0bf9yUnkdI+6GXaPApTiy8kFQc:79Gsh0s6vlnnkdIrGK/e

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2688	2252	WerFault.exe	27

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2252	InikaaurHB38BXW.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2252	InikaaurHB38BXW.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 2688	2252	InikaaurHB38BXW.exe	28
PID 2252 wrote to memory of 2688	2252	InikaaurHB38BXW.exe	28
PID 2252 wrote to memory of 2688	2252	InikaaurHB38BXW.exe	28
PID 2252 wrote to memory of 2688	2252	InikaaurHB38BXW.exe	28

C:\Users\Admin\AppData\Local\Temp\InikaaurHB38BXW.exe
"C:\Users\Admin\AppData\Local\Temp\InikaaurHB38BXW.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 808
  2⤵
  - Program crash
  PID:2688

memory/2252-0-0x0000000001100000-0x00000000011AA000-memory.dmp

Filesize
680KB

Download
memory/2252-1-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download
memory/2252-2-0x0000000004E40000-0x0000000004E80000-memory.dmp

Filesize
256KB

Download
memory/2252-3-0x0000000000480000-0x0000000000492000-memory.dmp

Filesize
72KB

Download
memory/2252-4-0x00000000004B0000-0x00000000004B8000-memory.dmp

Filesize
32KB

Download
memory/2252-5-0x0000000000500000-0x000000000050C000-memory.dmp

Filesize
48KB

Download
memory/2252-6-0x0000000004FD0000-0x0000000005052000-memory.dmp

Filesize
520KB

Download
memory/2252-7-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download
memory/2252-8-0x0000000004E40000-0x0000000004E80000-memory.dmp

Filesize
256KB

Download