Overview

overview

1

Static

static

1

2024-04-28...ns.exe

windows7-x64

1

2024-04-28...ns.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 07:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-28_68b4408c8983a3d59e47a001685e172a_ekans.exe

  • Size

    7.4MB

  • MD5

    68b4408c8983a3d59e47a001685e172a

  • SHA1

    e67463833ce78e3dae18fda28843a3caab57da58

  • SHA256

    f049fd13505d26ece8443ebac9105a061f14b86c077355d99076b4bdd634af62

  • SHA512

    9a50dc9ff662931c4228958a8918ef103e2912f9a0187cf518b25c97024ac88c4e03223610795d9a1e58b23b52d8f5931139309c196f8c54af099c7163228f4c

  • SSDEEP

    98304:7Qs83SvDZL8nW2Eb1X4JZ/ascMA4rnajjp5GF8:MsMiDZL8W2EZIJZ/asLA4rnaBA6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-28_68b4408c8983a3d59e47a001685e172a_ekans.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-28_68b4408c8983a3d59e47a001685e172a_ekans.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1400-0-0x0000000000400000-0x0000000000BB0000-memory.dmp

    Filesize

    7.7MB

    Download