Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15/01/2025, 17:46
General
-
Target
FE28717; CONSULTORES EN RIESGOS Y SEGUROS; DOCUMENTO ELECTRONICO; AB01;FE28717; CONSULTORES EN RIESGOS Y SEGUROS..exe
-
Size
1.2MB
-
MD5
b19f9509f01438b5486c394c52496fbf
-
SHA1
9a7754d1627d14cd945d38f236c27fa181c41eb1
-
SHA256
cf2b09a083f41af3d75b9cbb508a02661c1d13e2fd175f807405c8a60cd49a51
-
SHA512
cff98d0381b93b17b4dde22969357004a8363e6a074630b258a8cd632e496cfbd98b9b1d23e5049f4bf06d4f594b7cc097e816430140a81160d109a753a7c232
-
SSDEEP
24576:nb2cH84fEqDKZRNndwtsRjt/HBjkc5RemBq/tBAcaDkg3lTWfo:nb1VWNEIhvGEnqBA9plKg
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FE28717; CONSULTORES EN RIESGOS Y SEGUROS; DOCUMENTO ELECTRONICO; AB01;FE28717; CONSULTORES EN RIESGOS Y SEGUROS..exe"C:\Users\Admin\AppData\Local\Temp\FE28717; CONSULTORES EN RIESGOS Y SEGUROS; DOCUMENTO ELECTRONICO; AB01;FE28717; CONSULTORES EN RIESGOS Y SEGUROS..exe"1⤵
- Drops startup file
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 6522⤵
- Program crash
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
1.0MB
-
Filesize
6.9MB
-
Filesize
1.0MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
6.9MB
-
Filesize
384KB
-
Filesize
376KB
-
Filesize
304KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
336KB
-
Filesize
6.9MB