Analysis
- max time kernel
125s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
21/06/2024, 08:26
General
- Target PO STS_2184_06_2024.scr.exe
- Size 14KB
- Sample240621-kbvbysshkc
- SHA256 eb0f39c2d8285ca1135488f42ac98e705d3a8a407c08334692cd00f89fddc007
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PO STS_2184_06_2024.scr.exe"C:\Users\Admin\AppData\Local\Temp\PO STS_2184_06_2024.scr.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 17362⤵
- Program crash
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4572,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:81⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1496 -ip 14961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1496-0-0x00000000750CE000-0x00000000750CF000-memory.dmp
memory/1496-1-0x0000000000820000-0x0000000000828000-memory.dmp
memory/1496-2-0x0000000005200000-0x0000000005292000-memory.dmp
memory/1496-3-0x00000000750C0000-0x0000000075870000-memory.dmp
memory/1496-4-0x00000000750CE000-0x00000000750CF000-memory.dmp
memory/1496-5-0x00000000750C0000-0x0000000075870000-memory.dmp
memory/1496-6-0x0000000007870000-0x0000000007AA0000-memory.dmp
memory/1496-7-0x0000000006CA0000-0x0000000007244000-memory.dmp
memory/1496-15-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-19-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-31-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-33-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-45-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-55-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-53-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-51-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-49-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-47-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-43-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-41-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-39-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-37-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-35-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-29-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-27-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-25-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-23-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-17-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-13-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-11-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-21-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-10-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-8-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-61-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-59-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-63-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-67-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-66-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-71-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-69-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-57-0x0000000007870000-0x0000000007A9B000-memory.dmp
memory/1496-4894-0x00000000750C0000-0x0000000075870000-memory.dmp
memory/1496-4895-0x00000000750C0000-0x0000000075870000-memory.dmp