Overview

overview

3

Static

static

3

c94f00ed72...0d.exe

windows7-x64

1

c94f00ed72...0d.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    134s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 02:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe

  • Size

    3.6MB

  • MD5

    1b2eb636916557667dccccf81a9987ba

  • SHA1

    953834a7e13647588996b3f21aa9eb518b5fe732

  • SHA256

    c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d

  • SHA512

    3afe52234ca0d4ca8d53f627dcd265355274d554e930007b67139a984de9895d71cd5594aff4868ef46e8ea6bd7ee891aa3f5329c950d0775a96c502dcbabf44

  • SSDEEP

    49152:eVQyVfvURPaN3Saa7gH56hSpmPOUK42VDER:eVQyVHURPaN3SaaUZ6hSAFK4yER

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe
    "C:\Users\Admin\AppData\Local\Temp\c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1284-0-0x00007FFFF24D0000-0x00007FFFF26C5000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/1284-1-0x0000014A40590000-0x0000014A4092A000-memory.dmp

    Filesize

    3.6MB

    Download

  • memory/1284-2-0x00007FFFF24D0000-0x00007FFFF26C5000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/1284-4-0x00007FFFF24D0000-0x00007FFFF26C5000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/1284-3-0x0000014A5DD10000-0x0000014A5DE7A000-memory.dmp

    Filesize

    1.4MB

    Download