Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 10:36

General

  • Target

    0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe

  • Size

    694KB

  • MD5

    499a0ac48a43e78061f006f20bd9b9ae

  • SHA1

    8fb699a6f594026874f9a6e857aea03691366902

  • SHA256

    0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74

  • SHA512

    e088b77f911b82ba4ee2ca35cc0a37322e0bd2d1d03b908c22915fdf03b87c869d416373e8cbc1e54ecb4366f72720635a11c61934a0e7c2a9dd3287f7d7add2

  • SSDEEP

    12288:f5F6HkkoFY9OFNTBE9kt1nop50xBmT6o/78+iTBmhse6IdNxtR2t4DX+:f+8NlE9kt1nopixBmT6s78zBmhsvinKw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
    "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
      "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
      2⤵
        PID:2620
      • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
        "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
        2⤵
          PID:2628
        • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
          "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
          2⤵
            PID:2696
          • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
            "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
            2⤵
              PID:2700
            • C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe
              "C:\Users\Admin\AppData\Local\Temp\0b684d20eef9e48b778bac66117cc1c62ae648dc2fdde1f8ced3ce68873ccc74.exe"
              2⤵
                PID:2780

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  • memory/3056-0-0x0000000074BDE000-0x0000000074BDF000-memory.dmp

                    Filesize

                    4KB

                  • memory/3056-1-0x00000000001F0000-0x00000000002A2000-memory.dmp

                    Filesize

                    712KB

                  • memory/3056-2-0x0000000074BD0000-0x00000000752BE000-memory.dmp

                    Filesize

                    6.9MB

                  • memory/3056-3-0x0000000000340000-0x0000000000360000-memory.dmp

                    Filesize

                    128KB

                  • memory/3056-4-0x0000000000480000-0x0000000000490000-memory.dmp

                    Filesize

                    64KB

                  • memory/3056-5-0x0000000000490000-0x00000000004A6000-memory.dmp

                    Filesize

                    88KB

                  • memory/3056-6-0x0000000074BD0000-0x00000000752BE000-memory.dmp

                    Filesize

                    6.9MB

                  • memory/3056-7-0x00000000057E0000-0x0000000005862000-memory.dmp

                    Filesize

                    520KB

                  • memory/3056-8-0x0000000074BD0000-0x00000000752BE000-memory.dmp

                    Filesize

                    6.9MB