Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 01:08 UTC

General

  • Target

    6fd301a66adfcb776c00ecc765ce8e579ebc9675e7299ff5e81dbcbb2cb66bf7.exe

  • Size

    2.1MB

  • MD5

    d2fa012fd3d2d24dd998757b38ac8230

  • SHA1

    920833f9f883509dabeb80a78472f2f38e51feb1

  • SHA256

    6fd301a66adfcb776c00ecc765ce8e579ebc9675e7299ff5e81dbcbb2cb66bf7

  • SHA512

    f27a5d014ceeb116e4abc6eaa6850a13ca909f8d620455c2be0433157601bd49da40ad8a4afb84e0e6a13129c6c35e42e7ca47b0eb5c2de588b89fed60534af5

  • SSDEEP

    49152:RkfhWdXmiSq+kqXfd+/9A+8ArSt+JE7fdvnza8so90b7aF:CEB13+kqXf0FkArS4m7BzzsU0vaF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fd301a66adfcb776c00ecc765ce8e579ebc9675e7299ff5e81dbcbb2cb66bf7.exe
    "C:\Users\Admin\AppData\Local\Temp\6fd301a66adfcb776c00ecc765ce8e579ebc9675e7299ff5e81dbcbb2cb66bf7.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1716-0-0x0000000000CF0000-0x0000000000F14000-memory.dmp

    Filesize

    2.1MB

  • memory/1716-1-0x000007FEF54F0000-0x000007FEF5EDC000-memory.dmp

    Filesize

    9.9MB

  • memory/1716-2-0x000000001C0F0000-0x000000001C170000-memory.dmp

    Filesize

    512KB

  • memory/1716-3-0x0000000000750000-0x000000000076A000-memory.dmp

    Filesize

    104KB

  • memory/1716-4-0x000007FEF54F0000-0x000007FEF5EDC000-memory.dmp

    Filesize

    9.9MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.