Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
02-05-2024 01:48
General
-
Target
b07ef6c35c10a79f82f9dd9b618377f4368ac7ebed02110ae65f72ba9d3e2610.exe
-
Size
100.0MB
-
MD5
5ca74d3751ec5c8c459c8db13bb4f270
-
SHA1
7592ce42ea6a0bcdf13fa6d13e7446d2a372bbf1
-
SHA256
b07ef6c35c10a79f82f9dd9b618377f4368ac7ebed02110ae65f72ba9d3e2610
-
SHA512
7d1d23d85e2a2d3e56a0873a720f7bb449038746bb29294d4bc33a24e5c2298fa4df36439c2ed3f82dc065af4c830af60d15a06c833818029583dc759d230a4e
-
SSDEEP
786432:fWXgFYyWTpQXBVBEEIVeHDWIBV0aMoSctbw17p0Wm+Lf0XeHG7:fWaYyPKeh0ew1yLr
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b07ef6c35c10a79f82f9dd9b618377f4368ac7ebed02110ae65f72ba9d3e2610.exe"C:\Users\Admin\AppData\Local\Temp\b07ef6c35c10a79f82f9dd9b618377f4368ac7ebed02110ae65f72ba9d3e2610.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3884 -s 11002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3884 -ip 38841⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.5MB
-
Filesize
4KB
-
Filesize
84KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
216KB
-
Filesize
584KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
468KB
-
Filesize
468KB
-
Filesize
216KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
84KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
20KB
-
Filesize
9.5MB
-
Filesize
584KB