Overview

overview

1

Static

static

BH9CToolV1.exe

windows10_x64

1

Analysis

  • max time kernel
    78s
  • max time network
    112s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    21-07-2021 22:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    BH9CToolV1.exe

  • Size

    236KB

  • MD5

    7c87af92ebec77e337c6a7862b570626

  • SHA1

    6a2f848f929161d5bb640dee4af7ff0cf76ae5be

  • SHA256

    c44cbc814d7a471934221ab220fe9270e473eae6468e623061428ffa13bf2c4c

  • SHA512

    643565a8a122e2ebbd93b6d34981256e367da727040b3fa8995e2b2863a46b0e7a466c44b0fa05e6a7147a16865777be7b42c9ad8a4dc7764d8ac424a00e5768

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BH9CToolV1.exe
    "C:\Users\Admin\AppData\Local\Temp\BH9CToolV1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3624-114-0x0000000000D10000-0x0000000000D11000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3624-117-0x0000000002F00000-0x0000000002F01000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3624-116-0x000000001CAF0000-0x000000001CAF2000-memory.dmp
    Filesize

    8KB

    Download
  • memory/3624-118-0x000000001CA30000-0x000000001CA31000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3624-119-0x000000001CAF3000-0x000000001CAF5000-memory.dmp
    Filesize

    8KB

    Download
  • memory/3624-120-0x000000001CAF5000-0x000000001CAF7000-memory.dmp
    Filesize

    8KB

    Download