Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
25-06-2024 13:12
General
-
Target
67c8d609026083299f6b682bdd21270e16c4a6957704b3a65f7725d5da78054a.exe
-
Size
7.7MB
-
MD5
db7b076005cb0e0bfe31a69bf64b6fc9
-
SHA1
c257083cc17d7ed207dc2f334be994142065e46c
-
SHA256
67c8d609026083299f6b682bdd21270e16c4a6957704b3a65f7725d5da78054a
-
SHA512
ca3b3bf8ecf4ef33635ce539e6f398e1410bd01027034dd9cfd3341b5a79a17e6fff3ae7b5e74b804c1d9ab10f5c059fa8885bee7282bbbfb09a926dd9f9e3cb
-
SSDEEP
196608:H5HrcR103KQrAUA7lhCgZbC5NDfuKuM4MfzlO:ZH3KSAXwpTzE4zlO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\67c8d609026083299f6b682bdd21270e16c4a6957704b3a65f7725d5da78054a.exe"C:\Users\Admin\AppData\Local\Temp\67c8d609026083299f6b682bdd21270e16c4a6957704b3a65f7725d5da78054a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 14922⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
6.9MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
6.9MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
112KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
4KB