Overview

overview

1

Static

static

Hades.exe

windows7-x64

1

Hades.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    39s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2023, 00:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Hades.exe

  • Size

    463KB

  • MD5

    886bdae789da3ce292fae335c066e898

  • SHA1

    c0c2bb967c1db84d7226b6f9985d2b57448de7df

  • SHA256

    e7fd12f04f9673c9082c7c2e361b470641b438369403a9eed4315c4371e7fe7e

  • SHA512

    4797f66f6bd896230f3b5a321fa80f92b9e522b00429bf283ccf34c5d7e1607669f7af877af19f22c82ea052c7aa0f115262ac928412ad7fcf2de53d6e29ea30

  • SSDEEP

    6144:3cnj4rUbNT7Y7QFsZpQ7vnjCgT1AaINjtqaRnn6Z1xcDT:3cjfYUFsZp2hqB7R

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hades.exe
    "C:\Users\Admin\AppData\Local\Temp\Hades.exe"
    1⤵
      PID:1940
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x17c
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2036

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1940-54-0x00000000003B0000-0x000000000043A000-memory.dmp

            Filesize

            552KB

            Download