030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
31/01/2025, 07:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ZamwienieZ22012914_pdf.scr.exe
Size

30KB
MD5

a3ca0227df6bd50b5003370490c34291
SHA1

4ad313dd3ffb98b09b64b60d7917e7a23f9215f9
SHA256

030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c
SHA512

26c5b2d581d3b4fcb9a9de5b5788aad5a5aea1e565686238e5cc25a011bd6e99e80ccf78f09d9792182233059deb6e31164cb3282d014c5269e01411a1b4021b
SSDEEP

768:pA+1wxzNk46+kBeNpTBZGPz4y/FL7BykIB:pl1wfu+kBeNLuZBykW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2356	ZamwienieZ22012914_pdf.scr.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2356	ZamwienieZ22012914_pdf.scr.exe
Token: SeDebugPrivilege	2356	ZamwienieZ22012914_pdf.scr.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 4948	2356	ZamwienieZ22012914_pdf.scr.exe	31
PID 2356 wrote to memory of 4948	2356	ZamwienieZ22012914_pdf.scr.exe	31
PID 2356 wrote to memory of 4948	2356	ZamwienieZ22012914_pdf.scr.exe	31

C:\Users\Admin\AppData\Local\Temp\ZamwienieZ22012914_pdf.scr.exe
"C:\Users\Admin\AppData\Local\Temp\ZamwienieZ22012914_pdf.scr.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2356 -s 1080
  2⤵
  PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2356-0-0x000007FEF60D3000-0x000007FEF60D4000-memory.dmp

Filesize
4KB

Download
memory/2356-1-0x0000000001240000-0x000000000124A000-memory.dmp

Filesize
40KB

Download
memory/2356-2-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-3-0x000007FEF60D3000-0x000007FEF60D4000-memory.dmp

Filesize
4KB

Download
memory/2356-4-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-5-0x000000001C3E0000-0x000000001C4E8000-memory.dmp

Filesize
1.0MB

Download
memory/2356-6-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-15-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-23-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-53-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-63-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-61-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-59-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-57-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-55-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-51-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-49-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-47-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-45-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-43-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-42-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-39-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-37-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-35-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-33-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-31-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-29-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-27-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-65-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-25-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-21-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-19-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-17-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-13-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-11-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-9-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-7-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-69-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-67-0x000000001C3E0000-0x000000001C4E2000-memory.dmp

Filesize
1.0MB

Download
memory/2356-1328-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1329-0x00000000009C0000-0x0000000000A22000-memory.dmp

Filesize
392KB

Download
memory/2356-1330-0x000000001AE90000-0x000000001AEEE000-memory.dmp

Filesize
376KB

Download
memory/2356-1331-0x00000000011F0000-0x000000000123C000-memory.dmp

Filesize
304KB

Download
memory/2356-1332-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1333-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1334-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1335-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1336-0x000000001B350000-0x000000001B3A4000-memory.dmp

Filesize
336KB

Download
memory/2356-1337-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-1338-0x000007FEF60D0000-0x000007FEF6ABC000-memory.dmp

Filesize
9.9MB

Download