Overview

overview

10

Static

static

hesaphareketi-01.exe

windows7-x64

1

hesaphareketi-01.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    17-10-2022 17:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hesaphareketi-01.exe

  • Size

    30KB

  • MD5

    e6afab8c4782348cc7fab5c84acf1883

  • SHA1

    279ebffe57812186e4d4a7d65160b98674950a60

  • SHA256

    abfc03fd72f7e6827cf30bf0b28bd95fbda4095c549e4a07b5f23b7aeb55f4c8

  • SHA512

    6adfd0a446dbe13e09e71d71efc43be8cdf0ef579a5e6182d328da48ff88523c9bac8743e60fa0fbfb033dc12e583972d959ff7d4e6b8725dcedb36499b43678

  • SSDEEP

    768:cobj0sOzazGQloqQFtY2GmmIewLCsXjwmxWtOB/ucCJ:chylovczSLXjwmxWtG/+J

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hesaphareketi-01.exe
    "C:\Users\Admin\AppData\Local\Temp\hesaphareketi-01.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1988-54-0x0000000000E70000-0x0000000000E7E000-memory.dmp

    Filesize

    56KB

    Download

  • memory/1988-55-0x00000000761F1000-0x00000000761F3000-memory.dmp

    Filesize

    8KB

    Download