Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28-04-2024 09:02
General
-
Target
shipping documemt _pdf.exe
-
Size
1.1MB
-
MD5
7ac65417f47f6e29e6fa528a5d28a5b3
-
SHA1
b1a9c007f4c95ece727606f643bd4bd649f66ec9
-
SHA256
f51aedfe6998bb2f8f8c675f26e99b79252a3dee6f086bc44558e3a193470ba4
-
SHA512
bb01440d531fbe5fea7e08ea7d90c89632c92a04dd5ffb4ae6b0378a61680ee136dc7324b96e9d43173f83e074a879024f56ff56c73bacafb4d1e932fb217430
-
SSDEEP
24576:k0S9+TA+CWpmMYwXNGNFUZzcma2nRmCkCptEQybMCnRnj:9lIyXNGNFUZ4ma2RmqtGoSnj
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\shipping documemt _pdf.exe"C:\Users\Admin\AppData\Local\Temp\shipping documemt _pdf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1504 -s 5722⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
352KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB