Analysis
-
max time kernel
57s -
max time network
58s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
03-10-2024 07:09
General
-
Target
QUOTATION_SEPQTRA071244úPDF.scr.exe
-
Size
1.1MB
-
MD5
0b637b2700d31bc9bfee3d704af90762
-
SHA1
1eb843422fe6d469060f4d9be996b32dd47eb0f6
-
SHA256
df6b8ec2501a31a2545d2e3a7033cd403e32c94f9afe15798e0fb53d76f758d9
-
SHA512
9a14dcf7b785ed7a7176a1ff18e6f0060943229ab65061800efbbc9c9409b5cb93cd452bf95ed7efe41745bfdf4f06449cb4991bc154892e2d982da6916e4d7d
-
SSDEEP
24576:kAnzzufFdlZl59t1VNdDPEnF6XKDAOe4H444l:kaGfFdlZl59t1VNdDPBXK+4H444l
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QUOTATION_SEPQTRA071244úPDF.scr.exe"C:\Users\Admin\AppData\Local\Temp\QUOTATION_SEPQTRA071244úPDF.scr.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 880 -s 16082⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
9.9MB
-
Filesize
1.0MB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
1004KB
-
Filesize
9.9MB
-
Filesize
304KB
-
Filesize
496KB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
336KB
-
Filesize
9.9MB