8501e8b29d1ae257e70054aeeb1f5a069a58b0cb71625a8b530288ac93060dc8

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
12-05-2023 18:35

Target

Ladon911.exe
Size

2.1MB
MD5

0b993e62fdf26d0973f071df756d3b88
SHA1

ab08027337755f2c1de697751735a4fc1d9e6162
SHA256

8501e8b29d1ae257e70054aeeb1f5a069a58b0cb71625a8b530288ac93060dc8
SHA512

b4a1f5d21ca09621bb1ca6ee65dcc9acd3abda8d6e6ef9fe9310bde713f17b52c0ce95d18264ce31ba7d5574a2eeb470fe4e56ee75d5de42d54443913eb19b0b
SSDEEP

49152:7yDsl/dWcTiexwHLt/lLVrt7cAjZ7cQjzp0rbQllfgEwhUihZBIpD4D:7yDsvWcTiuwHJlZRYh/QzfxwhUi3BIU

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
928	Ladon911.exe
928	Ladon911.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	928	Ladon911.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 928 wrote to memory of 1596	928	Ladon911.exe	29
PID 928 wrote to memory of 1596	928	Ladon911.exe	29
PID 928 wrote to memory of 1596	928	Ladon911.exe	29
PID 1596 wrote to memory of 1920	1596	cmd.exe	31
PID 1596 wrote to memory of 1920	1596	cmd.exe	31
PID 1596 wrote to memory of 1920	1596	cmd.exe	31

memory/928-54-0x0000000000FB0000-0x00000000011CC000-memory.dmp

Filesize
2.1MB

Download
memory/928-55-0x000000001B450000-0x000000001B64A000-memory.dmp

Filesize
2.0MB

Download
memory/928-56-0x000000001B3D0000-0x000000001B450000-memory.dmp

Filesize
512KB

Download
memory/928-57-0x000000001B640000-0x000000001B844000-memory.dmp

Filesize
2.0MB

Download
memory/928-58-0x00000000009F0000-0x0000000000A16000-memory.dmp

Filesize
152KB

Download