030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/02/2025, 02:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe
Size

30KB
MD5

a3ca0227df6bd50b5003370490c34291
SHA1

4ad313dd3ffb98b09b64b60d7917e7a23f9215f9
SHA256

030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c
SHA512

26c5b2d581d3b4fcb9a9de5b5788aad5a5aea1e565686238e5cc25a011bd6e99e80ccf78f09d9792182233059deb6e31164cb3282d014c5269e01411a1b4021b
SSDEEP

768:pA+1wxzNk46+kBeNpTBZGPz4y/FL7BykIB:pl1wfu+kBeNLuZBykW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe
Token: SeDebugPrivilege	1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 4708	1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe	31
PID 1200 wrote to memory of 4708	1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe	31
PID 1200 wrote to memory of 4708	1200	030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe	31

C:\Users\Admin\AppData\Local\Temp\030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe
"C:\Users\Admin\AppData\Local\Temp\030c16ffccb55c4a06c3b93d11390e7b2c5b218e220594d45c9fb02f622b856c.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1200 -s 1000
  2⤵
  PID:4708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1200-0-0x000007FEF55A3000-0x000007FEF55A4000-memory.dmp

Filesize
4KB

Download
memory/1200-1-0x0000000000BD0000-0x0000000000BDA000-memory.dmp

Filesize
40KB

Download
memory/1200-2-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-3-0x000000001D0B0000-0x000000001D1B8000-memory.dmp

Filesize
1.0MB

Download
memory/1200-9-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-7-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-5-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-4-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-59-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-55-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-51-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-41-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-29-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-27-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-25-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-23-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-21-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-19-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-17-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-15-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-13-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-11-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-67-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-1326-0x00000000022D0000-0x0000000002332000-memory.dmp

Filesize
392KB

Download
memory/1200-1328-0x000000001BC20000-0x000000001BC7E000-memory.dmp

Filesize
376KB

Download
memory/1200-1327-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-65-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-1329-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-1330-0x000000001BC80000-0x000000001BCCC000-memory.dmp

Filesize
304KB

Download
memory/1200-1331-0x000007FEF55A3000-0x000007FEF55A4000-memory.dmp

Filesize
4KB

Download
memory/1200-1332-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-63-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-61-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-57-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-53-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-49-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-47-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-45-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-43-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-39-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-37-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-35-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-33-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-31-0x000000001D0B0000-0x000000001D1B2000-memory.dmp

Filesize
1.0MB

Download
memory/1200-1333-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-1334-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-1335-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-1336-0x000000001BD50000-0x000000001BDA4000-memory.dmp

Filesize
336KB

Download
memory/1200-1337-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download
memory/1200-1338-0x000007FEF55A0000-0x000007FEF5F8C000-memory.dmp

Filesize
9.9MB

Download