Overview

overview

10

Static

static

hesaphareketi-01.exe

windows7-x64

1

hesaphareketi-01.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    152s
  • max time network
    184s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2022, 06:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    hesaphareketi-01.exe

  • Size

    23KB

  • MD5

    f6b1dd2591feab56f364a1ccaa7e2538

  • SHA1

    4a703eebae8be5be510b2a77f8c0c3c02eb67a32

  • SHA256

    826e3671ba9e4e5b882513fe4805843f9ed48d26738e2072d33655ffcafca83d

  • SHA512

    616a976e8108801e3e94128596bab266606fbc4edabccfbdd269121967fe1ecf948619e128775c8ca25e3df95cb67538d14dca2d9e633acd2935c8480cc684b8

  • SSDEEP

    192:GqjfkKXPCGDAev2PcoFTPnxcFz7Fs2WST6zvlRJTHhnj4OpqZndlJ4biHPNyW1:GqjfkFYAev2PbLYzQTBHCZJ5H1T

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hesaphareketi-01.exe
    "C:\Users\Admin\AppData\Local\Temp\hesaphareketi-01.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1952-54-0x0000000000CF0000-0x0000000000CFC000-memory.dmp

          Filesize

          48KB

          Download

        • memory/1952-55-0x00000000758C1000-0x00000000758C3000-memory.dmp

          Filesize

          8KB

          Download