Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/02/2024, 01:31

General

  • Target

    7ddaaf6d21e274d71188c67f0ba01b696283978e07ba00e8321fc2b41a8fa57d.exe

  • Size

    9.8MB

  • MD5

    727bceae00db9d067658146925e96a20

  • SHA1

    7c2eaf38f63aeeaa0a4903cf03fb96dc1c48f7fc

  • SHA256

    7ddaaf6d21e274d71188c67f0ba01b696283978e07ba00e8321fc2b41a8fa57d

  • SHA512

    361ea00095f8ddb921a1a529bed0e9a5cece000492f32a85189b2b5be9c349006d75525bd6e997150834865e48744d4131ac611ec09dc927b793dff017df2709

  • SSDEEP

    196608:mhGS2f3d3reKfTknINTJZn8Wsx8YOBjJounKGg9YzJE3F3arUyEpfWfc:R3dePnOn8WsWYOBuunvzJIarUKk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ddaaf6d21e274d71188c67f0ba01b696283978e07ba00e8321fc2b41a8fa57d.exe
    "C:\Users\Admin\AppData\Local\Temp\7ddaaf6d21e274d71188c67f0ba01b696283978e07ba00e8321fc2b41a8fa57d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Cab7F11.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7F24.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar815B.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

  • memory/2908-7-0x0000000000310000-0x0000000000318000-memory.dmp

    Filesize

    32KB

  • memory/2908-124-0x0000000002B80000-0x0000000002B88000-memory.dmp

    Filesize

    32KB

  • memory/2908-6-0x00000000002F0000-0x00000000002FA000-memory.dmp

    Filesize

    40KB

  • memory/2908-1-0x000007FEF58F0000-0x000007FEF62DC000-memory.dmp

    Filesize

    9.9MB

  • memory/2908-8-0x000000001BE50000-0x000000001C04E000-memory.dmp

    Filesize

    2.0MB

  • memory/2908-9-0x0000000002A00000-0x0000000002A0E000-memory.dmp

    Filesize

    56KB

  • memory/2908-10-0x0000000002B10000-0x0000000002B18000-memory.dmp

    Filesize

    32KB

  • memory/2908-4-0x00000000002D0000-0x00000000002D8000-memory.dmp

    Filesize

    32KB

  • memory/2908-3-0x0000000002930000-0x0000000002976000-memory.dmp

    Filesize

    280KB

  • memory/2908-2-0x000000001B7F0000-0x000000001B870000-memory.dmp

    Filesize

    512KB

  • memory/2908-0-0x0000000000A40000-0x0000000001416000-memory.dmp

    Filesize

    9.8MB

  • memory/2908-122-0x0000000002B60000-0x0000000002B68000-memory.dmp

    Filesize

    32KB

  • memory/2908-123-0x0000000002B70000-0x0000000002B78000-memory.dmp

    Filesize

    32KB

  • memory/2908-5-0x00000000002E0000-0x00000000002EC000-memory.dmp

    Filesize

    48KB

  • memory/2908-125-0x0000000002B90000-0x0000000002B98000-memory.dmp

    Filesize

    32KB

  • memory/2908-126-0x0000000002BA0000-0x0000000002BA8000-memory.dmp

    Filesize

    32KB

  • memory/2908-127-0x0000000002BB0000-0x0000000002BB8000-memory.dmp

    Filesize

    32KB

  • memory/2908-128-0x0000000002BC0000-0x0000000002BD8000-memory.dmp

    Filesize

    96KB

  • memory/2908-129-0x000000001AFE0000-0x000000001AFEA000-memory.dmp

    Filesize

    40KB

  • memory/2908-130-0x000000001AFF0000-0x000000001B03C000-memory.dmp

    Filesize

    304KB

  • memory/2908-131-0x000000001B040000-0x000000001B048000-memory.dmp

    Filesize

    32KB

  • memory/2908-132-0x000000001C230000-0x000000001C2E2000-memory.dmp

    Filesize

    712KB

  • memory/2908-133-0x000000001B110000-0x000000001B11A000-memory.dmp

    Filesize

    40KB

  • memory/2908-134-0x000000001B110000-0x000000001B11A000-memory.dmp

    Filesize

    40KB

  • memory/2908-135-0x000007FEF58F0000-0x000007FEF62DC000-memory.dmp

    Filesize

    9.9MB

  • memory/2908-136-0x000000001B7F0000-0x000000001B870000-memory.dmp

    Filesize

    512KB

  • memory/2908-137-0x000000001B110000-0x000000001B11A000-memory.dmp

    Filesize

    40KB