030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
31/01/2025, 07:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Zamówienie Z22012914_pdf .scr.exe
Size

30KB
MD5

a3ca0227df6bd50b5003370490c34291
SHA1

4ad313dd3ffb98b09b64b60d7917e7a23f9215f9
SHA256

030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c
SHA512

26c5b2d581d3b4fcb9a9de5b5788aad5a5aea1e565686238e5cc25a011bd6e99e80ccf78f09d9792182233059deb6e31164cb3282d014c5269e01411a1b4021b
SSDEEP

768:pA+1wxzNk46+kBeNpTBZGPz4y/FL7BykIB:pl1wfu+kBeNLuZBykW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2376	Zamówienie Z22012914_pdf .scr.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2376	Zamówienie Z22012914_pdf .scr.exe
Token: SeDebugPrivilege	2376	Zamówienie Z22012914_pdf .scr.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 5044	2376	Zamówienie Z22012914_pdf .scr.exe	31
PID 2376 wrote to memory of 5044	2376	Zamówienie Z22012914_pdf .scr.exe	31
PID 2376 wrote to memory of 5044	2376	Zamówienie Z22012914_pdf .scr.exe	31

C:\Users\Admin\AppData\Local\Temp\Zamówienie Z22012914_pdf .scr.exe
"C:\Users\Admin\AppData\Local\Temp\Zamówienie Z22012914_pdf .scr.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2376 -s 860
  2⤵
  PID:5044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2376-0-0x000007FEF5483000-0x000007FEF5484000-memory.dmp

Filesize
4KB

Download
memory/2376-1-0x0000000000160000-0x000000000016A000-memory.dmp

Filesize
40KB

Download
memory/2376-2-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-3-0x000000001C430000-0x000000001C538000-memory.dmp

Filesize
1.0MB

Download
memory/2376-4-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-5-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-17-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-27-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-45-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-7-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-67-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-65-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-63-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-61-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-59-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-57-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-55-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-53-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-51-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-49-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-47-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-43-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-41-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-39-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-37-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-35-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-33-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-31-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-29-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-25-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-23-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-21-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-19-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-15-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-13-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-11-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-9-0x000000001C430000-0x000000001C532000-memory.dmp

Filesize
1.0MB

Download
memory/2376-1327-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1326-0x000007FEF5483000-0x000007FEF5484000-memory.dmp

Filesize
4KB

Download
memory/2376-1328-0x0000000000AF0000-0x0000000000B52000-memory.dmp

Filesize
392KB

Download
memory/2376-1329-0x0000000002160000-0x00000000021BE000-memory.dmp

Filesize
376KB

Download
memory/2376-1330-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1331-0x00000000021C0000-0x000000000220C000-memory.dmp

Filesize
304KB

Download
memory/2376-1332-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1333-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1334-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1335-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1336-0x00000000022B0000-0x0000000002304000-memory.dmp

Filesize
336KB

Download
memory/2376-1337-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download
memory/2376-1338-0x000007FEF5480000-0x000007FEF5E6C000-memory.dmp

Filesize
9.9MB

Download