Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-04-2024 14:07

General

  • Target

    PCWProtectorServiceB.exe

  • Size

    242KB

  • MD5

    f637513089742ab2d236a35941bf7140

  • SHA1

    736335cb4963ffb93f282fd3ac6c8cba9acf8bd5

  • SHA256

    31658ce6d0128abcebf3b135991a8e742b57de66f4d557d10106c0341b1413e7

  • SHA512

    117cfa2fa1b6fb192be5679bfee1a8f55afbd920a8af50b636379c4a519f626745645d8ff94a2446a007b1c7dfd66070a3e22f9218b3f25dcb2fb8863b4c7d4a

  • SSDEEP

    3072:npFAq9VOrR2QctCalW9cq/ekmob21tmoSUu32jHq0oJFtfSy5lxVa1VmU5TbH:7AmOAQ+CaA9cq/TmoKmvJ+q0o8GqzTb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PCWProtectorServiceB.exe
    "C:\Users\Admin\AppData\Local\Temp\PCWProtectorServiceB.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads