11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 01:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe
Size

595KB
MD5

404b3e8655b581497ea6d1f394a5d27d
SHA1

8c706938bc43dd1c4678c4879f4dc51dad9e6431
SHA256

11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476
SHA512

7f135fc396cc280ef7454aaa785c1a570bf6b285b7eae70ce0d26cc8a477e024488884f5ca5d7e869917950cb6440b1bcd916069c859f28c355b48b44cfb50e1
SSDEEP

6144:aEpn+8kGzHlXoB9z2VloojvZNjuorHIpDFlSEf4H444l:9hHlXoBMVl8FR4H444l

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe
Token: SeDebugPrivilege	1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 4932	1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe	30
PID 1988 wrote to memory of 4932	1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe	30
PID 1988 wrote to memory of 4932	1988	11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe	30

C:\Users\Admin\AppData\Local\Temp\11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe
"C:\Users\Admin\AppData\Local\Temp\11ff90a33d73be660d1408cf99f48baa9dbaf0d15572848a7a024aab03973476.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1988 -s 880
  2⤵
  PID:4932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1988-0-0x000007FEF5543000-0x000007FEF5544000-memory.dmp

Filesize
4KB

Download
memory/1988-1-0x0000000000F80000-0x0000000001018000-memory.dmp

Filesize
608KB

Download
memory/1988-2-0x000007FEF5540000-0x000007FEF5F2C000-memory.dmp

Filesize
9.9MB

Download
memory/1988-3-0x000000001C1A0000-0x000000001C2BE000-memory.dmp

Filesize
1.1MB

Download
memory/1988-4-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-5-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-7-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-39-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-49-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-59-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-9-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-11-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-13-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-15-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-19-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-33-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-47-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-67-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-65-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-63-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-61-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-57-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-55-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-53-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-51-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-45-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-43-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-41-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-37-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-35-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-31-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-29-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-27-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-25-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-23-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-21-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-17-0x000000001C1A0000-0x000000001C2B8000-memory.dmp

Filesize
1.1MB

Download
memory/1988-1078-0x000007FEF5540000-0x000007FEF5F2C000-memory.dmp

Filesize
9.9MB

Download
memory/1988-1079-0x0000000000830000-0x00000000008C8000-memory.dmp

Filesize
608KB

Download
memory/1988-1080-0x0000000000930000-0x000000000097C000-memory.dmp

Filesize
304KB

Download
memory/1988-1081-0x000007FEF5543000-0x000007FEF5544000-memory.dmp

Filesize
4KB

Download
memory/1988-1082-0x000007FEF5540000-0x000007FEF5F2C000-memory.dmp

Filesize
9.9MB

Download
memory/1988-1084-0x000007FEF5540000-0x000007FEF5F2C000-memory.dmp

Filesize
9.9MB

Download
memory/1988-1085-0x0000000000980000-0x00000000009D4000-memory.dmp

Filesize
336KB

Download
memory/1988-1086-0x000007FEF5540000-0x000007FEF5F2C000-memory.dmp

Filesize
9.9MB

Download