Overview

overview

7

Static

static

3

3434882067...cf.exe

windows7-x64

7

3434882067...cf.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2023 02:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf.exe

  • Size

    165.8MB

  • MD5

    c7726f0de42834a9d77a7e68b7f65846

  • SHA1

    3eaade0973cb6763b46552f79e5bb1070e73d489

  • SHA256

    3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf

  • SHA512

    78e20b1e5906a820f2bd5dfa72d680acf755c1a49fbdd24a75cd9d4332da32554da9281d84757019dba6742e31dcd123e29aeeb8b26ebe2759ddd7375ccce4ed

  • SSDEEP

    786432:bcfVFYdOekFfux1Kq0DsqEnz1XSY3v9XSIsmhidXposvHH7QdPA0mgErPJ18:YfzYdxkGM16zsY3hSCKWsf7Qggj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf.exe
    "C:\Users\Admin\AppData\Local\Temp\3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:4116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\.net\3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf\pL5yz6N6W25bB5l3h9wxRPh7BELL76o=\PresentationNative_cor3.dll
    Filesize

    1.2MB

    MD5

    065dd29623094723eb64abdfdc1e0ccc

    SHA1

    016bd778b73c3c896a80e68feacc59f81f9336e7

    SHA256

    3634af90ff8d08c710e4bed1c27cc63e436de5e08b47004ce63ac373cc4ba558

    SHA512

    b8b11ac0767876099c0374a3e8e4f8efa216937366928625eefd00ca6b64467fd292d413aff413e3009d0e73182cddd23d3f898c2069936abb13ff96fa599129

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\3434882067653dc2b67b235ff3ae4f71d912d4d601dda76da22f22fd9b6907cf\pL5yz6N6W25bB5l3h9wxRPh7BELL76o=\vcruntime140_cor3.dll
    Filesize

    106KB

    MD5

    9881b65ce5dc886800c5690e167ef2af

    SHA1

    c0e957b2bc9529d9a80b3dc301fbc2ac7037d83f

    SHA256

    852a7469ad6468c8a319d3d3abcfd1c691e6ca3c544fa58bc7b4099df8fbed2b

    SHA512

    e5b818df459ca298980a0068010b334deaeef4128bc5398bdf837672cdb55880f0ab2a8a8ad86ce4b1806e8614657165dc2848f0b91347be96b3c6be7a99e064

    Download Submit