Analysis
-
max time kernel
1556s -
max time network
1563s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
18-04-2024 18:50
General
-
Target
dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe.exe
-
Size
8.6MB
-
MD5
ef593e4713e733dbe75277f79f76ba01
-
SHA1
6ae75342e56ba64f5b8d4a86cd14beeb1b2ed1fd
-
SHA256
dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe
-
SHA512
566b2f292498c9cb0ba4f99a3ac658df8f31c7e5e79bc4773027461cdf77bb96922cd461223b47bc5a8d45b6408cd358a5b4135b48093ce75d6abed60c72aeb3
-
SSDEEP
196608:cVB3kHo8Nb2ga7OFQOurL3Vz8uZMb3ObpSzZTfurSu:mmIO2iQhlzBZMb3dzZfsS
Malware Config
Signatures
-
Loads dropped DLL 17 IoCs
-
Suspicious behavior: EnumeratesProcesses 61 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe.exe"C:\Users\Admin\AppData\Local\Temp\dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe.exe"C:\Users\Admin\AppData\Local\Temp\dfef52ffdea9d5129cd6bf0b3df2997db40091a4bdb7f356f48feec5ac5ebcfe.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
350KB
MD54a6f0301904cd714885ad201b6be1a89
SHA105e2b5d274692b7af402425539d10bf2fc716fd8
SHA256082e190a5b1f9d089d781da182a9b868afc177d488694814fee1e6822a237c64
SHA51294762d1a79071a984b432f48f2aed8aeb24b96bbae0ac10cba1f93b4ab89042606e9b408a37d46e6db671e45d585323b5ac7146bbd9288567a0348c1b518d784
-
Filesize
43KB
MD51644252d4128006b94573dec74383abe
SHA10bbdd0063bf815c1d72e389e5f01e4dc563291c5
SHA25640212755ee68fda77c25f1b73d860af1c71256540c18d22113140d004ed3bfa6
SHA512c35f821f16b47d79a67b904bc0706e5ace178831dc77e1f51bbc4333529fdfb56cb2a63a25395fee6a4578557681a6124a7eb24953129d42c50a1eaa450e75e9
-
Filesize
878KB
MD575ab4ec017ca4f2adcb60b4b909f5338
SHA19a6916fc0fdef1a1891cb422fada273aef9db9fc
SHA2569eecdeb542613c96ef9d822c754677fad20cdc6b01f998438f9143981c42d6b1
SHA5120588ef65aa63e5fc8e55847a2373629819b74b9f2ae656f73b9fe3543caa7914a206ec2d5e846b927e1d0b292418498362ab31dcc3ecea930e9f56a19b8a282e
-
Filesize
2.3MB
MD5df1a706ed563fa3f0b48f427609708f4
SHA15c479ffca8a2d71023c2522f54ed3f6f36f88e79
SHA2565c4f7eb850cb4ebd35c039be7319e2ed05439418884d414001e015c4637585fc
SHA5128757e27d78291f48237a5b4b15cea26d08d03c8b9ff1ad61c50d890b3e8b62fd0db819959b9c13b3d88ebe3e54ae176fc67d02ffe62c89c577af1866cb238a73
-
Filesize
356KB
MD572d8c1a1d90a3803ca16c8e49b3811a0
SHA18dad10d99c8a409d82f210375307334fca88b8cc
SHA256e502aac9a5f0b66bddd4c29c9986c6aa93daa10ed4c02501fa27575369103bf6
SHA512212bc660b392c3e21831be40399bd83a4c9d818ffdfd5700e55da9972bb89c69bb0b48a92079700a185602ddaade5a9868aa4af0621110f0ffdc0c89cbc8a7b5
-
Filesize
24KB
MD5bae272192df2cfd83408cc2fa5ac6572
SHA1713a39e101e99e2c5f8e9d736df17853a773cc59
SHA256b1f142d9ba52dd25a3be9384b3b8327b397152482705ed8053924c65ee1323c6
SHA51266787d1d5e9872000f2b754feba678c817e9611ee356f52d73655517321f3c02fa41d0fa1fb70617197516decf9fe98fde45741efa4843f790332cf7d3326fcf
-
Filesize
28KB
MD5a762edc4b5df9574acc812b28f5ad4df
SHA1191a54e18748ec2a64265cfbbc63abee10bf213a
SHA2568deaf3cd30d6398e4083021e124968051d6afb1368c64445b28f84f5f97389a8
SHA5120614be19697f069fcd91a50181c1f9e02618cb898d90692403c7e92a5ce6de949e7c1a5da27fc1c802f8baee04e194104d989d6883797612794853f8ffaf4de3
-
Filesize
9KB
MD548d2f1163f382b463b4ceddfbf7c5363
SHA1de450d0bfb3c1dcc2182ea593ea651887b87b7d0
SHA256ac4fdc5334fbf347c0bdf7976592987fc072f281e971c64aaffd8d416fff8852
SHA5120a8bd0aaa656acd6a181deb2b647805444bc9fdb3a097a2c7f1cc2261f0a99b128ee7bb8986d1f4759eb488ccbd23f04efb3422cbe44ddcbff2f7d064dde7279
-
Filesize
10KB
MD50eb0be4e1a4fc8398bb7c0058e100190
SHA1a496301e85246a3c3c10002a0f9e6406a6bae49c
SHA2569235274c242f06c6f57e9f5d539520cbef9f5a1ab376ec636f8bd1316974727e
SHA512e902b177de4fa8cd0ae9bdabada9c2e3372627b95928655f2d64de446ca0f49dbd8e49d538d851b2ad726fcd3c7898f03f79cff72cdbdcf41ff777e20a3075b5
-
Filesize
85KB
MD5d0e6bee31c7f2b0de979562ce5f6444f
SHA19223853061b067f7af17007067d24ce746917d1d
SHA256f6fb937147342609a793a1ccb839ad504ec0e7807d072a9ac6eb51ba846e17a9
SHA5123d64a460178479eec3cd1a65421dafb78b15011fcae472873ab28fb1ecc42482d00b141426874b12beef9247ad6b4afe1bd723d398f37d44316bc1b9c4dba434
-
Filesize
43KB
MD546f73c17dae565e924ae9a1c91035890
SHA13586e9dc75c10cf779b6d96687a9bfe9ad7048ec
SHA256de2ab148577c3fd73eb6a709dfb759e49f7e92fac04cecb39487e21e9feb0d44
SHA5127a4b8f8ed0eb5ed7cb377d05f0c67d7af350f0fe8de8520ec87dd74f3b5353347b090000d78ee653c5407a7cb391907d0474d7d1c4ce7cf6230a14b49b3d4d4e
-
Filesize
1.6MB
MD5edc5ad9405c39caa3631b366611c28fa
SHA17dd318efb22fc94c075cbdf98c272096d57b1417
SHA2568a499d3e39741b22931ec2f3d1a40fd297ea2c87309608193d0196857f3d176c
SHA5120b0ddd6942bf8f7c7983892bc4fb1d90e909876758b171fec1c11067b1c3ab883619a2283d34f145a3826e2cb2e245e5906da88a09acaa4513c7869d2ce0797a
-
Filesize
107KB
MD5f0469abb4f2914c78ce875a430425958
SHA197ae25198aa240ff4464c29622a4b045efba7581
SHA256c97e1ab93e2d18a76b4bb1c8c43605d7de94d3baaeae0c9e28fd750e943d0335
SHA51217daa4695f20cb468bfacb317c5e47c19cc424233854565a41229bb1ed576c1d34b90c3dbd103a3b791423eda6400587e2ea84ccd5312f847841f76b6539ac12
-
Filesize
10KB
MD5e89195790a8e51de3932565fd7a9e395
SHA189f510123ade374a49439289da241b059309625e
SHA256930f9245028f2a958e314513fecd74999b8fb33d366f6366da30b2d2d1a2b4f2
SHA512e37340fa5a220c89460b905f1aa710b26d31dfdf7eb10ea2123258ade39567280a827d2869a938dcec5a33444a01bf4def26073d308a41b376b21e886d31e8c4
-
Filesize
33KB
MD52e28e1512fd2f5a7cd3cd9882c71fe2b
SHA19554938faef3639b58fcac45b5324455db5d8e0c
SHA25645867cea4f2738531f8472d4a864b316885a7caf7d8d77626b112194724e0230
SHA512ee66b72fcaa3da686527b9ed3cb56dd477cd53fbca93252d640ebd264e648d480d5f8d9cd7153892ac0af3bd62dc0fb05ee8e0eb071d8fe454477af0f7ea2884
-
Filesize
670KB
MD5a386257355990be5aafb54e7a678ff27
SHA195f29eb90c56c45f9d9ad985ca08a9472a96bf25
SHA256629948424adc0e54adced0b67ddb21080fd542c43e56f800eeee4611663d2842
SHA51260b169ac64c0167a056bb372d3d11f8617ebb2a3acc428f7a8ad35db99909e0169d69480c780a179931d6357c1676cc0210cae42d01d7457b4f40b38a3c1ae5f
-
Filesize
96KB
MD5cd646e722c515cd13540b4b3d0e46e4b
SHA15fd847597423f537bb3a9bbcfe8d5b51156a7c53
SHA2569f3d6583a669ceb3cb5660786fbfbcd23472aa1ab76d9c0eb24302b6138baf3d
SHA512d6eb74f8bde8b146e73b648e5187d90baf0a2cb7db19abd0741dfcc2df331a620bbc1e174839a76a144b0c4a3ab694114d99e94f36ba13520038ebbe118e5279
-
Filesize
392KB
-
Filesize
52KB
-
Filesize
44KB
-
Filesize
896KB
-
Filesize
1.6MB
-
Filesize
52KB