Analysis

  • max time kernel
    0s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 10:06

General

  • Target

    Akrienpremium40exe.exe

  • Size

    4.3MB

  • MD5

    8af52c532dee095626de6c3ae0b182bb

  • SHA1

    fa981b39bf3a83e2f68b9f95cb4a968a0fc99d23

  • SHA256

    4a6fa79f84ec213fe6c3a5776a878a2e5734d96819a9bbc865b00bc966cdf976

  • SHA512

    8be5a9d7209b01b3f4e758a63cd0dc272fb33bb53370834f9c564633991e9cce3d8cc9d6efdb3d1554ac209adc6a34afe8db18dbe86b25395e89be590c68e76a

  • SSDEEP

    49152:g/5tJDBRnrQkbB1CjaorTkjf5O5rihkRbxdkkYgpX6tkWuiZMh5WEWkwYTMj:ab6SROk7AOkwB

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Akrienpremium40exe.exe
    "C:\Users\Admin\AppData\Local\Temp\Akrienpremium40exe.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads