b9af69ac821a649f211c99e3edf32a76a213e9450b5e972a6cdda5758af530dd

max time kernel
0s
max time network
12s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 15:18

Sharing

Copy URL

Twitter E-mail

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Narrator.exe command="C:\Users\Admin\AppData\Local\Temp\Narrator.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

Report Analysis Logs

General

Target

Narrator.exe
Size

596KB
MD5

e394fa14eca0d2c0a098c35d543ff79f
SHA1

67a4f1353e17b49671d97d68e5df06558362600a
SHA256

4801e79129c89c39df996da3be23b0af3f4f9715f2d36ec75ac8fc6708ddc0bf
SHA512

90ee47013c9998a891569914e615c44852a4d25c532cefd73c09136fb30fec63c7351f3f437bc0fe6db5806ef74f02f042ab83174d140b617c6ddaf72d1673a5
SSDEEP

6144:TvPjItGMH6WIN9AejyGePQhLdvJS3lptAy+7vJj3bO3TJjaVL+Kzrr4x8:Tctvc7AeyPQZJgV/e7vlyjTKzrA8

Score

3^/10

persistence privilege_escalation

Malware Config

Signatures

Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
persistence privilege_escalation

Accessibility Features
T1546.008

C:\Users\Admin\AppData\Local\Temp\Narrator.exe
"C:\Users\Admin\AppData\Local\Temp\Narrator.exe"
1⤵
PID:964

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Privilege Escalation

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads