4a3366cf93759cb78a0ed525bfac3d7bbdf76cfba65517a8dcceefc074e29b61

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/02/2025, 03:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Faktura VAT-FV2025011500091_pdf .scr
Size

33KB
MD5

d8d7f78fe5c20a6b352f07555596d52d
SHA1

87c051d95e93ede211646eedc17558d105a73161
SHA256

d63c8389d2b2cabed5b7c9a96a37199ef8509f21ea4c30907ef472a81703277b
SHA512

9c40cd0bc0d434dc83ad7109c7ae2760303267e2b0e04ad405ebafece908e935d315655811ac951791d268c952661a7052fe85834da928b1bc5faaba5bed2f4d
SSDEEP

768:e4tstdxqNvXA5IRBy47AtXKSgWDu01L3x+1gb:e4tstdx6vA5IRBXUm6dc1gb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3016	Faktura VAT-FV2025011500091_pdf .scr

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3016	Faktura VAT-FV2025011500091_pdf .scr
Token: SeDebugPrivilege	3016	Faktura VAT-FV2025011500091_pdf .scr

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3016 wrote to memory of 5292	3016	Faktura VAT-FV2025011500091_pdf .scr	31
PID 3016 wrote to memory of 5292	3016	Faktura VAT-FV2025011500091_pdf .scr	31
PID 3016 wrote to memory of 5292	3016	Faktura VAT-FV2025011500091_pdf .scr	31

C:\Users\Admin\AppData\Local\Temp\Faktura VAT-FV2025011500091_pdf .scr
"C:\Users\Admin\AppData\Local\Temp\Faktura VAT-FV2025011500091_pdf .scr" /S
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3016
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3016 -s 1156
  2⤵
  PID:5292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3016-0-0x000007FEF5103000-0x000007FEF5104000-memory.dmp

Filesize
4KB

Download
memory/3016-1-0x0000000000AD0000-0x0000000000ADC000-memory.dmp

Filesize
48KB

Download
memory/3016-2-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-3-0x000000001BEB0000-0x000000001BFB8000-memory.dmp

Filesize
1.0MB

Download
memory/3016-4-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-5-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-7-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-15-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-29-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-43-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-57-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-9-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-67-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-65-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-63-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-61-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-59-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-55-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-53-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-51-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-49-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-47-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-45-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-41-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-39-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-37-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-35-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-33-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-31-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-27-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-25-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-23-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-21-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-19-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-17-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-13-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-11-0x000000001BEB0000-0x000000001BFB2000-memory.dmp

Filesize
1.0MB

Download
memory/3016-1326-0x000007FEF5103000-0x000007FEF5104000-memory.dmp

Filesize
4KB

Download
memory/3016-1327-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1328-0x0000000000A70000-0x0000000000AD2000-memory.dmp

Filesize
392KB

Download
memory/3016-1329-0x00000000024B0000-0x000000000250E000-memory.dmp

Filesize
376KB

Download
memory/3016-1330-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1331-0x0000000002510000-0x000000000255C000-memory.dmp

Filesize
304KB

Download
memory/3016-1332-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1333-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1334-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1335-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1336-0x00000000025E0000-0x0000000002634000-memory.dmp

Filesize
336KB

Download
memory/3016-1337-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download
memory/3016-1338-0x000007FEF5100000-0x000007FEF5AEC000-memory.dmp

Filesize
9.9MB

Download