Overview

overview

4

Static

static

3

28208fadc2...9c.exe

windows7-x64

4

28208fadc2...9c.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    61s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/12/2023, 10:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    28208fadc282556644b1a4f618299750b29c512d2268891fea5b07de01bf279c.exe

  • Size

    3.0MB

  • MD5

    20657fa2865baf174a6480b4e1ff8556

  • SHA1

    0c3065ff1696c48ab1cf0631726a6bcd10c198e5

  • SHA256

    28208fadc282556644b1a4f618299750b29c512d2268891fea5b07de01bf279c

  • SHA512

    8941ac35531eefeae33be12f5f2379d3472dc8f7c7b2716cc4ad5d95edeac63cbbe5e6c5b08b08fa70ac45717f1156ba8b46d01050990fb94dd154bc10c128da

  • SSDEEP

    49152:lIkGI+sjeGwjS1cu5QZuTtS0rQMYOQ+q8CEPjSn6rizjStm9KFeMs:lH1jeExWsM0r1Qn6OWm0Fe5

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 60 IoCs
  • Suspicious use of AdjustPrivilegeToken 60 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\28208fadc282556644b1a4f618299750b29c512d2268891fea5b07de01bf279c.exe
    "C:\Users\Admin\AppData\Local\Temp\28208fadc282556644b1a4f618299750b29c512d2268891fea5b07de01bf279c.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\dkjkgbbld
    Filesize

    2KB

    MD5

    cd98ba338c695176272f663246964606

    SHA1

    586538868dacd1ecaf509697fe2a57640fcee5f8

    SHA256

    163d1cecef47e4f2b202ea7cc908fe303a68388d3d4f487386bcdb508e63f1c0

    SHA512

    9186f4ddbcf157154b45e8cd9a26ba70f54f26aa0d9406cba6d3fbbc01e72d41a1ce1533deca939e9eb0b047c48f5071185a273a27119a4aeaf75709d1e4597e

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    ca5072336ab1400f9c83b5f6258d319c

    SHA1

    d3380413112ddc2caecd6b079d892f3344d5b558

    SHA256

    8b3f320aae44994c1f719e73c62232b7d95b79d2f199139b91a50fb142c99ed3

    SHA512

    8f64a2932585e2434366943cbfffe28c4f68b5f10320515fdf948360e4dfb8eb0558edeaf97619251a11d8a234493497ad70c110f03f0ee1fbc61ecf45c599cc

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    2KB

    MD5

    4cfde92a471cf0afb7fc3834421d1996

    SHA1

    95de47ac4adafea8ec7e26a532ebb50a3a3c0b54

    SHA256

    23f263356b4a450fec7b0ca887a1b6c2b5d3c3dc2e0c338eed30d14b53eb820c

    SHA512

    2194fc1da651a4998f52e18d357df9e66b5c932b6a3ddb51fcdf8980c29dea7e7ee8d11cdc201eb843d9ef83696f54750941054a738bf83c34f23344fb366c73

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    287B

    MD5

    38fac1f9a7cb78f33b16e74b82620183

    SHA1

    f5df6db4f3f9d31f3d589dd37a8a9feb184a9d33

    SHA256

    33bd8c3eade67b9de07e42782ae45afc24f9f87e17d3524ca9622cad945310db

    SHA512

    a022b3807504d664bd569558c756371c39e18171db4f59f273ea7025173d100c14ff7e7a3e8c94b964e80b12a7bbf61cddd04aa8297f505cd69e9d7169103215

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    365B

    MD5

    9a5857719f14b045785ab240b0fe09d9

    SHA1

    32280b7cbd1176bca1ebeb7d9afa8246a6410542

    SHA256

    383ffc068dae62a4397ff18319ef047bac1ac5e7abc3fc060961aa933e3b183c

    SHA512

    ee9a6877e152b9b1bd49de90a85f86be4f7beb6d3abe51c3aedc655b4364909579b1292ba1d78b6f2515082b5078579cc764278e50782c7857c14b5d1811d949

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    391B

    MD5

    5bf4cf4461803950ba05ae319608ce97

    SHA1

    bbf93be8da0212184622346eb10a536b500c792f

    SHA256

    6671a7464441ef1167a3472be26f994c77e47750eb1d082b412e6a67411a73bf

    SHA512

    8ddff8ef7f0771e746be5665091ccdeacc424ad5225bdec971a086c0ad4e39e5abe68dd2b4253724fcf470b7891d781166e9283ba4475a48a760e42fc755a740

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    485B

    MD5

    0f7628e5308481e05cba7edabd6b6c8b

    SHA1

    425e7ac2b42034a4773f202a8470d2537fee3b07

    SHA256

    5d14e46be21ff7f9a285b25f4e061e3115abe8f68197b00477c4a4d010d2df05

    SHA512

    b5c3a4068ff141ca4bb81e2f3acae12e59e494d785c2469db6efd66e155233590c55601613d70c8b5ba14310cd47decd1f5972e39fc034414e054a032a11fb61

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    66B

    MD5

    705371f68300744313dfdbf3ef61c019

    SHA1

    8cdb9a52c0f338fee4aedbd953413bab4d36fd69

    SHA256

    e947e55f94565c3fe6787c1f44066c1ca0648b5ddd2946f03a076ff0f4178411

    SHA512

    a4c904fae999e3a55f520c8a3e3c2a68840b8b113d20b3fa13a74e3a5de1c9331cfaecbc8c86d8fbcd2982238bf23792f1d88840cc664e49e6fd6313a04fb119

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    542B

    MD5

    511307001aaa912fc038474c03dafbe0

    SHA1

    6ce356977e92a00e5261235afa82a4869b7341bf

    SHA256

    adf3b39442d0d8eca1a7bcc9a0ede147bc99165c370d516ab0dc40dfa6ad2a12

    SHA512

    c98491a831d7c9d2f30963bc167f3f4229a4c4b89a87fa56d444cda6fb34a4b77fac491e945d6efa7d836c0f69967fa2453f27e2421a7d7c757fc18888f4980e

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    570B

    MD5

    e91d343ec91047c4e96afa07c63eef2f

    SHA1

    2b95edeb8d6e4dc2862ae981492d7d1a5c460b41

    SHA256

    6606fa9739c9a5d4bf1067c9d20428f4e2a53c6e870642a5dc38d384feccfa99

    SHA512

    b19f3b05e626e067b4a14b4db0c8d14b67daeaf2de51c5a9d3dbe4981b63354726dda291977c406dbca0202635de64ee2904affd3a71910cb29289588c1fd662

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    671B

    MD5

    1efccf9158dbeed68b9a5e9fe2f64749

    SHA1

    1542d6fda55bdcd1bceec3fd25f8dd2de9c0262d

    SHA256

    45e20c7b5fa4752535b96fa460bed2e08c60cded9e15742f6c46eda5fa731e8c

    SHA512

    1e7dc8b39e83dbd8b4c9c6a608bf436d2a36808a6508150d36df4458ea2bcfaf7b9363a95d63499257dbd357cfa1ab3b1f746781de4cdb35143d3f99a79b560b

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    90B

    MD5

    1660bf1962d79f4b8a6d456c3221c9fc

    SHA1

    02c4e49f21a73e1463eb05123df99b42f59f3ba9

    SHA256

    f64467818a2f1f5e190684f0b22a4777def46a343bd253cad619fa91ffcf3564

    SHA512

    6775f66b7c6fbab6ba9a39982d2a86ab88b8b779e2293c6783dd2a67231aadede379bd1a06e2d66c80100085cab07482896c115767dec7a98df4856acef9b36b

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    730B

    MD5

    cecd6dbea01a97d3c9f7d8f6e53533e0

    SHA1

    aaa2bf2fa52e33e4fedc722d83fc27fc29d9f557

    SHA256

    f76ea2031b35f72caeb0d544693064cab75d4a1454aec0240b4eee486ebe3843

    SHA512

    4c2eba0a4f35d26efce6a2db533ecdf2d5031dff8190dffbb1d490c740d4935cd78b6d9a1f9516395f90df1dd64f290dec2102a3678cb398732cedc8871f76c4

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    768B

    MD5

    7979c3bf7dffa3069af108aaaf046a2f

    SHA1

    d495c8109375d4622dc172ec9ba6829354162e4c

    SHA256

    2e9dbc2f2f79c1973bbebf58aaf0f3b9669a8c69467ba50f95d13cf6bc8bb15a

    SHA512

    a2ebc3b9c8a5895b8967311ae98e697be281c1e07f81877eae8e887180bd7b4b593357180e76c6452f9efaef3c5f5af8096c74e16ac4511190076e60a487cf2b

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    796B

    MD5

    9ac67175cf4e94d8d225848613cc8661

    SHA1

    59f35ec02675639eb4c242b48c37ad7db5a993e8

    SHA256

    708e328c9535c60441079a003f1fb97480abece27e78e552cc20ae8f8b7834e4

    SHA512

    4d5fef4ae57950e729658f2b7dcd2a0b0f156added43a5d75a6148e340bc3171877d92fdda1f92584849d6fadb7df2fce5191bae61bb6ecdaf5e01c937516098

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    937B

    MD5

    a0e59096a9fd879236a452aa9b186182

    SHA1

    d5f6568760352c461f1b3350119281ac207735d3

    SHA256

    cbf350a532fa349aceed5abeeea7747d75910b70ecf4b4b66112f93ceac2ffe0

    SHA512

    aedb03c7093c2bde7a4ea7cf5dc99604df40b938cef36fe68bba970e3df7205df46b28b5ddbb3820c4fc062a5de31d466b2f3dfda209980df40d29d5b540fe06

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    118B

    MD5

    08473146c5a1b9d380cea66aea5dec3d

    SHA1

    e6bf3b1fce0d42cd3b703515e576dbd8f6f1f6cc

    SHA256

    a3b8d009047dbb852f231d0f8da522f869774dc1bb053bfb191a8c1d9a0dc2c6

    SHA512

    f9a339bfaa50bedcd0459ce9376d5de32ed636b9064fe3bbd84eed06a57d5b1dab8c163f7d908e26653c43b5a7437d55f7c412bc25819372daee6d4be6b397e0

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    979B

    MD5

    63cb0dc51e7f6fa982ead070c78558a2

    SHA1

    de348a83ae3db64c95ba396461abe51452354546

    SHA256

    362eec7367c88bc678adf2a31dccc77e77979dc42012016e1718ef8040dcbb6c

    SHA512

    63c3f1e239be787c86bbd66df7d55690fd0b3d21470f504ef7863c73a4bfc00a20ae97eab1e4cc95109dfc16ba4980a802d46318c0df5ca055bd9682fcd3b884

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1007B

    MD5

    c56858b2c6aedce3671bbc190b3748c4

    SHA1

    a60f695d1ca1761b8d958713af9bf9c7126e8a4d

    SHA256

    8428052c5a3f46920f63ee5b94095b06d2d58d965e743a99bffc8dc8bf99cd01

    SHA512

    95cd2db5dee339c4d3a19548d05c685fa00ad618e8bd741cb8a6f557c4bbfa04188143285d532b5bdc1b6422b5dd41a17c16a7367b4a06dbe8fb606d4c31abad

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    17B

    MD5

    9bf5e7e19f9ed925ac9d844a5dc86323

    SHA1

    f948c0e21830fe086604457f61419b70d70b97f2

    SHA256

    05e9fd20469d794d186813a94afcc28d89fd38d7b2992edbbf21147b45714609

    SHA512

    f77955a84217092cfb51998469c98a191e2f1b44249daa392d2895e2350b0211e8e19151c297a808d3935ac5afc7000f60f8a588cbee22d4e5f9a43e758de91a

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    c19e0336a6e1709935b37fa11093abd0

    SHA1

    9abe2228fbc75b9656a7d23ae0bb03dc17fc2aff

    SHA256

    3f46ddcc99be8f851a8d744d61d56e9b556338da2537826029d034750f8a8125

    SHA512

    020d98355b0b5acd13567cf43090d301dfb321899c1037afab5ba9caaf29a652c2ac43308c3c729595fb12d9c279ac6b355cf1bd08c274da2c03010b84b01378

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    8fbfc8b85502d60f0f6721dc5a598f9b

    SHA1

    44b2aca0553e429e8be0376ffbc9b80ccab73c81

    SHA256

    3b50538fc9378569f97046c55697804424cb5327bcdd1cd43c502af3cd4237fd

    SHA512

    a4175555263f0dd5274c2a89515787ead0eaae8e40aaf43d5b5b68f25cd7d55e56e1fe866702cfb0a16a3ebb77f769d44164c783aae47798e4c12597d70a6224

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    146B

    MD5

    b637e9012a5276414a493a148c948617

    SHA1

    e0776ce159d3766c938b87285135d082e80afc51

    SHA256

    f17da8e3dc5f46bc052f31af1f598aa72d9fafe4f924a951d3e1fec8aba97c7e

    SHA512

    5ad9b79a461b2ec3bd1fefae1b0d4d591d58938d2304e5df570c5023ad53c72e15f4bfbc51eace881c0f6453c1413c7dd8b83e5abcb90cc1b3911d76e471a330

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    959B

    MD5

    8decd51a198ed95131ff8ef8cd61e137

    SHA1

    10cc6bc898efb7d1e985b8c34e72adebc5706c8b

    SHA256

    acf65c1fcc56da1556408b537ed9d1a6935d4111ffbc189743bd6196a0e5e129

    SHA512

    403207ead0628e08e714ec0cfe0d81e44fc25356dcd142600a0ad61fc3dbf29f46036cbf1ef1911554fa58ddc5dd7a02a3be24aa0ff3d8fdd7489b1529c84d2e

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    52a875f27f7f099286de354d34f968b6

    SHA1

    e4f9f1a9e0c5168b54adc4bc6f8673de1fb8de42

    SHA256

    1d3e8262202acef1828f9a37125d18cacde88e1a14fd3bec26c92ae65f0fbd29

    SHA512

    b38a7887c3fea94597d3cb50a0eb9ab3d7bd155c9ae69c6c2a011c74f6245f5f31054ac379fdca931c41597cce0101b715c7a2a3681f752dcb342d00c8cd6a95

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    4efad84c451abd754f4f9ef875e7e4cf

    SHA1

    02129780a288a6ab34ce8f2e71206578d87c8a8d

    SHA256

    c26df1107e1ad1560190f37b1f47502a9a468529ffedb0f4f3ba61636a66eec4

    SHA512

    e64f3018ed9adb0726f1d27b4f8d47c351fd1b3d41389a24c24a46a38b81c01ded280fe1dad44b08f373148432f91e32b6346ac3a69aca05a18170446396a7c0

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    174B

    MD5

    86da15ca1e9a0217b95e060bef884bf9

    SHA1

    0a3808a25a34b2bb03ad281c5c6ab618896ba74b

    SHA256

    0592513ec18fb5dd77c1e983e1c99a199a61a5cf3095cad26b0b224363b344c4

    SHA512

    f97d4cc86d03c70d6d101950a1fb18ce9718ea84f407f262a2dfa15effaa664aba95723d3fe5f47866eeb9562dd413a6e2dbed1d18527a481ea674e2d5e4a4d1

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    1749762d14d36708df6949486c21100c

    SHA1

    7815a6eb0feb288d2fad991af120d0675e63b043

    SHA256

    08529a53cb6f4f2a0f2d87fc97438c6b86d4a5f523b3677815a45c6382694c1e

    SHA512

    30a8d9c88cbd14a434e3de31b9b64a050a8ec9930ed68d4e2e225535672142ee0099a3bfb162d78cc0ae03cadfba25cf831a8e1eef752071eb5339770763ad61

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    f27a5a2b496cfb67d479bb3026451fac

    SHA1

    cac0d7d880c83d49621577bfa13c3f5fd4b4ce10

    SHA256

    6b8b4d93a7922154789a3122287ac030ad3240a7d59d271173c3557d634cdec5

    SHA512

    9c6d73d4fe38fe30ea6bbfb725f4eeb59e7be57a05e1357ede2bc98048daa904eda13f541e2949985b836f2e382afafc98c74cc1e1c6bfd4d789c1bc205e2e00

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    2da08ad1ed1892d701603a043bed436c

    SHA1

    277d48921c583ab0815eb34a4f6957ec5dda80d6

    SHA256

    9a04c60a1b1dba33dd011d0f6fd5cbcd5fe912c692e21b73d81e1cae492ddf2c

    SHA512

    19792f922a6e19589229e6e758e019203e67fa4bc519a0689130e56eae2755ba750c97a2a5719c0fb0b984de5dbb58609fcf094e0e9d5a0dfd1b0ff531c720d7

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    3022648ce49a30ba0c99d37229dea257

    SHA1

    2c399a7f575d123ecb47017d3bc35d4a3fbd4018

    SHA256

    a7494da973ad97555a7064eeca553ad97e77025088f465f1c6b5abbdd33e6377

    SHA512

    bad33e55dc26a418b82253e611202f5cfdcb858540ffbadcee12ebc652386cfca800d68f385f07c9069c91fca260d043df9b75348a07e7d863446c8faaca1b53

    Download Submit

  • C:\Windows\dkjkgbbld
    Filesize

    1KB

    MD5

    12c5513e2de0033dd0f43b6a2b58b046

    SHA1

    0ad0707b2f84d0bf614a6b7f3e113c1886eba59a

    SHA256

    65a185e16fa058b45c0d249db6ecc5b725f237ef4ed51b9a2473f5e21bc50399

    SHA512

    3146f760a2d508b41e5cfe27ff3b311c0c3aa7e2b291dd3ddb987436ccbdcef7858c30ad9b4c3d35496c3e7b525d72c2e66a36b180fabc73dcc8748d4d0e7e23

    Download Submit