Resubmissions

15/03/2024, 15:22

240315-srx2sadh23 9

15/03/2024, 04:03

240315-emwq9sfh4v 9

Analysis

  • max time kernel
    360s
  • max time network
    368s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 04:03

General

  • Target

    BLTools v2.7.2 Pro.exe

  • Size

    3.4MB

  • MD5

    b6accab723ca675c18544f2640cabce8

  • SHA1

    066ee4ec9fe7eb3520543797878ba6b77148010f

  • SHA256

    1ddbbe124a321ba8c769295cf91ed5a2ddfd4669da9f1bb95907a30120b1c2a1

  • SHA512

    ec4797aad8f6250be0ac1903231c2f8eb1ec03b1650ba69b81df5fc9d80842ff8fbfebe8d25539f9c14fa2a898fff04965fe5748f01be90b4aadf869e7a5e0c2

  • SSDEEP

    49152:VMByOj9Ss24R0wFhlMv6DSdsHXgzSq0Xll2JEW38Y2WUC:Vyj9Sl4R0wFrNDSGH8Kll2KWtjUC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BLTools v2.7.2 Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\BLTools v2.7.2 Pro.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\Local\Temp\Tar30B8.tmp

          Filesize

          175KB

          MD5

          dd73cead4b93366cf3465c8cd32e2796

          SHA1

          74546226dfe9ceb8184651e920d1dbfb432b314e

          SHA256

          a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

          SHA512

          ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

        • memory/2988-14-0x0000000000670000-0x000000000067A000-memory.dmp

          Filesize

          40KB

        • memory/2988-63-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-4-0x00000000049C0000-0x0000000004A10000-memory.dmp

          Filesize

          320KB

        • memory/2988-5-0x0000000004A10000-0x0000000004A70000-memory.dmp

          Filesize

          384KB

        • memory/2988-6-0x0000000000670000-0x000000000067A000-memory.dmp

          Filesize

          40KB

        • memory/2988-7-0x0000000000670000-0x000000000067A000-memory.dmp

          Filesize

          40KB

        • memory/2988-8-0x00000000023A0000-0x00000000023A1000-memory.dmp

          Filesize

          4KB

        • memory/2988-9-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-10-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-11-0x0000000005A80000-0x0000000005AA4000-memory.dmp

          Filesize

          144KB

        • memory/2988-12-0x0000000074B30000-0x000000007521E000-memory.dmp

          Filesize

          6.9MB

        • memory/2988-1-0x0000000074B30000-0x000000007521E000-memory.dmp

          Filesize

          6.9MB

        • memory/2988-3-0x0000000004FC0000-0x00000000058EC000-memory.dmp

          Filesize

          9.2MB

        • memory/2988-0-0x0000000000BE0000-0x0000000000F50000-memory.dmp

          Filesize

          3.4MB

        • memory/2988-13-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-52-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-55-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-56-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-58-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-57-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-59-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-60-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-61-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-62-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-2-0x0000000004F80000-0x0000000004FC0000-memory.dmp

          Filesize

          256KB

        • memory/2988-64-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB

        • memory/2988-65-0x000000000C820000-0x000000000C920000-memory.dmp

          Filesize

          1024KB