Overview

overview

3

Static

static

3

Setup_02027.exe

windows7-x64

1

Setup_02027.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-04-2024 19:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Setup_02027.exe

  • Size

    31.1MB

  • MD5

    aae9d74d18be54559561129edb355dd8

  • SHA1

    bde86ad5c1a39b7412bb55543e1691a094f4da46

  • SHA256

    084dd0507fbb45b2653c4f21580bb714a5d46ddb44d0f57b88aff45dbda83d38

  • SHA512

    36668e8956080437576756dec78190c2fed4ec6daffdec6d6e95c954f49fe1d82fb3787f2a475900eee90bcf8ea30e13448e2f9b5bbdbc9c7dd0064a8894410c

  • SSDEEP

    786432:W+5d33+TehQif3Tf3DInGtwkiOOSS58+S0cP9l7ogTV:sGmt58rPv7R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup_02027.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup_02027.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads