Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
13/05/2024, 07:24
General
-
Target
sipariş formu_831512.exe
-
Size
1000KB
-
MD5
47b16e69d5de9f504b97c51fbe86058a
-
SHA1
6d316883d0db78d1b82ad2af26f19d87efec6cc1
-
SHA256
b18f3f7bfbef4fe4dcc05ce549cca1a17832573bee4ac7ee03ab5eb66312642d
-
SHA512
c119a1701ae148b0335c5c19ecc88f6bcfa88e089d85955955f8208dda26a486349248c4d71492849992bbebae73a374f979cb3168156d9d78e5a6861e1f306b
-
SSDEEP
12288:bwTeH81jJUetQaZMH1BdV+6zC/wSHUOxUGv+TO74XvMxX6q:f8MetQPXY6zC/wSXAO74UxX6q
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sipariş formu_831512.exe"C:\Users\Admin\AppData\Local\Temp\sipariş formu_831512.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 816 -s 12642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 816 -ip 8161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
624KB
-
Filesize
7.7MB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
88KB
-
Filesize
528KB
-
Filesize
4KB
-
Filesize
7.7MB