Overview

overview

7

Static

static

3

Hexa v1.5.zip

windows7-x64

1

Hexa v1.5.zip

windows10-2004-x64

1

Hexa v1.5/...de.dll

windows7-x64

1

Hexa v1.5/...de.dll

windows10-2004-x64

1

Hexa v1.5/...er.dll

windows7-x64

1

Hexa v1.5/...er.dll

windows10-2004-x64

1

Hexa v1.5/...ts.dll

windows7-x64

1

Hexa v1.5/...ts.dll

windows10-2004-x64

1

Hexa v1.5/...er.dll

windows7-x64

1

Hexa v1.5/...er.dll

windows10-2004-x64

1

Hexa v1.5/...de.dll

windows7-x64

1

Hexa v1.5/...de.dll

windows10-2004-x64

1

Hexa v1.5/...data_0

windows7-x64

1

Hexa v1.5/...data_0

windows10-2004-x64

1

Hexa v1.5/...data_1

windows7-x64

1

Hexa v1.5/...data_1

windows10-2004-x64

1

Hexa v1.5/...data_2

windows7-x64

1

Hexa v1.5/...data_2

windows10-2004-x64

1

Hexa v1.5/...data_3

windows7-x64

1

Hexa v1.5/...data_3

windows10-2004-x64

1

Hexa v1.5/.../index

windows7-x64

1

Hexa v1.5/.../index

windows10-2004-x64

1

Hexa v1.5/...er.exe

windows7-x64

7

Hexa v1.5/...er.exe

windows10-2004-x64

7

Hexa v1.5/...config

windows7-x64

3

Hexa v1.5/...config

windows10-2004-x64

3

Hexa v1.5/...al.dll

windows7-x64

1

Hexa v1.5/...al.dll

windows10-2004-x64

3

Hexa v1.5/...or.dll

windows7-x64

1

Hexa v1.5/...or.dll

windows10-2004-x64

1

Hexa v1.5/...HT.txt

windows7-x64

1

Hexa v1.5/...HT.txt

windows10-2004-x64

1

Resubmissions

23-04-2023 17:07

230423-vm2waagc9v 7

23-04-2023 17:03

230423-vkr83aeg34 7

23-04-2023 16:56

230423-vf3h8sef88 7

Analysis

  • max time kernel
    66s
  • max time network
    72s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    23-04-2023 16:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Hexa v1.5.zip

  • Size

    21.5MB

  • MD5

    fff80170492a9c4a8f4948ded88a36ae

  • SHA1

    f1523517319cb5717cee0f06ae3500dca3be2a07

  • SHA256

    871761e2556c306e5507c278fee29c3f507d4eb0efac36cb98dc432daa15784f

  • SHA512

    7f37c7b76c1adb990f310282902a737b257689ee82141a0c291363399769f5cf63209e0028c112b519af5d2ceb8a09dad92cc1ad32d5ea9e023886d5edea10e5

  • SSDEEP

    393216:hjsBtdiiH+F7w7ifc8Ms68AbEupoQIx+q03woJxKK9S0bj+rTObuHPXvL9Qk:hoBfiiH+hjfcttnAupoNx/awoJxKIS0E

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Hexa v1.5.zip"
    1⤵
      PID:1656
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:1612
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x548
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1424

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads