Overview

overview

10

Static

static

3

BBVA__Avis...df.exe

windows7-x64

1

BBVA__Avis...df.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    BBVA__Aviso_de_Pago_pdf.exe

  • Size

    46KB

  • MD5

    c34b58d960ea87eec970a9333c7f9292

  • SHA1

    ca23b1d2418edc91a2a49968738ce09a6f7bbfc6

  • SHA256

    8b3aa60f494833274c18171586730f2f4650a0c8c2de4cd901d853948b6f1fce

  • SHA512

    e1dc12741f2448059aeb99be1f6e0df91bb4ee655b3be892ecc027842e78c39b3388cb5748dbac8b56f8ad245312194159522619b26c6775f558b72245c64aab

  • SSDEEP

    768:LDpDj/nau11+B1Z9wg4MYVctOi3FaKMUXF1x2ySCtk7PHqAk:HpvnaK1+ZWg4MYVcAKMUX/x26qHVk

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BBVA__Aviso_de_Pago_pdf.exe
    "C:\Users\Admin\AppData\Local\Temp\BBVA__Aviso_de_Pago_pdf.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2156-0-0x00000000742DE000-0x00000000742DF000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2156-1-0x0000000000A60000-0x0000000000A72000-memory.dmp
    Filesize

    72KB

    Download
  • memory/2156-2-0x00000000742D0000-0x00000000749BE000-memory.dmp
    Filesize

    6.9MB

    Download
  • memory/2156-3-0x00000000742DE000-0x00000000742DF000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2156-4-0x00000000742D0000-0x00000000749BE000-memory.dmp
    Filesize

    6.9MB

    Download