Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04-12-2024 14:12
General
-
Target
PROFORMA FATURA pdf.exe
-
Size
1.8MB
-
MD5
00e8ff51aeee836ba8c765d8fddef307
-
SHA1
fb6ebb2222b4b6a328684ac51795092435ed229e
-
SHA256
283abbd8b30c201c0c58db11b6245ebff8fff283de873e52442e3df7e373eff1
-
SHA512
a699858a707af7acf11d0a19896aca7ba3b5e99525566bce4620580666d7f2251a502079e95fa371862bf7d8ea616bc04c01032dcb855e085da211abc0a7b8f6
-
SSDEEP
24576:Sxis3sVkUc0TznnsGXLDT01+EuVkwaSW+xoiOkcIM1W8M8HU1C:S33sV4MDn3XLDobuCGDodF48J
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PROFORMA FATURA pdf.exe"C:\Users\Admin\AppData\Local\Temp\PROFORMA FATURA pdf.exe"1⤵
- Drops startup file
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2712 -s 5922⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.8MB
-
Filesize
960KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
9.9MB
-
Filesize
304KB
-
Filesize
9.9MB
-
Filesize
392KB
-
Filesize
336KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB