Overview

overview

7

Static

static

3

35dc31f1f2...aa.exe

windows7-x64

7

35dc31f1f2...aa.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    134s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 04:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    35dc31f1f2e55975ad1fc496ce63fc1048fb4ee54e10a34b7738800222b267aa.exe

  • Size

    1.1MB

  • MD5

    34f4d04b9bae73e63ab7f39518db07c0

  • SHA1

    7fe5441d928af9b02ea4604ae7fb98fd46a71f65

  • SHA256

    35dc31f1f2e55975ad1fc496ce63fc1048fb4ee54e10a34b7738800222b267aa

  • SHA512

    a6b75b74df08b2e2880427c9118a5c41ea4b3614e73b03f0f57c9df5daf559315657a605bd1d890fceb531ee98be4fabb0924e114c061d1d2bdefcf6ba878805

  • SSDEEP

    24576:2cUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA:25QZuTtS0rQMYOQ+q8CE

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35dc31f1f2e55975ad1fc496ce63fc1048fb4ee54e10a34b7738800222b267aa.exe
    "C:\Users\Admin\AppData\Local\Temp\35dc31f1f2e55975ad1fc496ce63fc1048fb4ee54e10a34b7738800222b267aa.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Checker_ABCD1000.dll
    Filesize

    738KB

    MD5

    c89b75c6eef975d1c000178e53536033

    SHA1

    8b969c1801448f1def5853cef1a317dc690c1e6b

    SHA256

    63e23a4c6fc647e50ce5e391609a87b88b04a6d643234df29a745a957baa7feb

    SHA512

    b219d6687ba2e8ea9795be9f5cdc3bbc415082d27dd4499e813ffc87fc75783ce0d8df92053b0fb9716366b60b91109f6460cd7ceeaa58e5fb47cd7eae588002

    Download Submit