Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
02-05-2024 01:49
General
-
Target
2144b0b74e847cbdd01cfa2df27477c00722a904cd1a967947169dba32d63ef7.exe
-
Size
97.8MB
-
MD5
06dd7aeb509dea5a0e9144fc7144eb4a
-
SHA1
b5eae7cb0e4c3191a86b79a140adc14552214429
-
SHA256
2144b0b74e847cbdd01cfa2df27477c00722a904cd1a967947169dba32d63ef7
-
SHA512
e4f7d583a66b1e7b197f9c35ffb570a6becfbb0aa323959e8dcecc7a39d6a0fa0783868f4175b250b5d3078f82a4f373d57ab2c13b2c964c314c16e561888841
-
SSDEEP
786432:WWXgFdAWTpQXBVBEEIVeHDWIBV0aMoSctbw17Qm+Lf0XeuGU:WWadAPKeh0ew1pH
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2144b0b74e847cbdd01cfa2df27477c00722a904cd1a967947169dba32d63ef7.exe"C:\Users\Admin\AppData\Local\Temp\2144b0b74e847cbdd01cfa2df27477c00722a904cd1a967947169dba32d63ef7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4840 -s 10562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4840 -ip 48401⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.5MB
-
Filesize
9.5MB
-
Filesize
4KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
84KB
-
Filesize
468KB
-
Filesize
468KB
-
Filesize
84KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
232KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
584KB
-
Filesize
584KB
-
Filesize
1.0MB