Overview

overview

9

Static

static

7

Verse crac...or.exe

windows7-x64

1

Verse crac...or.exe

windows10-2004-x64

1

Verse crac...RU.exe

windows7-x64

1

Verse crac...RU.exe

windows10-2004-x64

1

Verse crac...ll.exe

windows7-x64

1

Verse crac...ll.exe

windows10-2004-x64

1

Verse crac...rt.exe

windows7-x64

4

Verse crac...rt.exe

windows10-2004-x64

5

Verse crac...64.exe

windows7-x64

4

Verse crac...64.exe

windows10-2004-x64

5

Verse crac...er.bat

windows7-x64

1

Verse crac...er.bat

windows10-2004-x64

1

Verse crac...er.exe

windows7-x64

9

Verse crac...er.exe

windows10-2004-x64

9

Verse crac...er.exe

windows7-x64

7

Verse crac...er.exe

windows10-2004-x64

7

Verse crac...n].bat

windows7-x64

1

Verse crac...n].bat

windows10-2004-x64

1

Verse crac...15.exe

windows7-x64

9

Verse crac...15.exe

windows10-2004-x64

9

Verse crac...ip.dll

windows7-x64

1

Verse crac...ip.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 03:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Verse crack from feds and nex/Injector.exe

  • Size

    38KB

  • MD5

    a19948457af73fe0f3c49b49badf6abd

  • SHA1

    4ea1c82444ba61bcb7dfa189acbfc80847fe42da

  • SHA256

    3b6136a46763fc80aa5e6bcffd52023ec36678bc9d2dbf87f1f8527861a67a86

  • SHA512

    d035be1546ae86a33aaf682dfa20aa35d3d5ea350e11ef61849e4ec03d63673e1726b18b3f9abfa8e7b4d4d76cca45411bf106bb6425c2da048601ccaf2848f0

  • SSDEEP

    768:agK4Vns9VKClWwy0pGtqXnF/PME2+0nhMkTdhKVlD7+ZsRID6+:agWLKCl9yYW5TikTdQVlD7JID

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Verse crack from feds and nex\Injector.exe
    "C:\Users\Admin\AppData\Local\Temp\Verse crack from feds and nex\Injector.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads