Overview

overview

6

Static

static

3

4b27f61f44...9c.exe

windows7-x64

6

4b27f61f44...9c.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 05:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4b27f61f44388f9cfdb0364659ed56c89e8da8aa22a6482f0f2f4dfb1c7d0d9c.exe

  • Size

    371KB

  • MD5

    e0d920eb5dfa66b7570546f4fbffea78

  • SHA1

    f35b9f60f56f871a011f9368eec20f386957410c

  • SHA256

    4b27f61f44388f9cfdb0364659ed56c89e8da8aa22a6482f0f2f4dfb1c7d0d9c

  • SHA512

    1920589ca9b4d24f30bfb7444c02de762407b8a246b04f237ab951c8e319b46cce78feb204a90de7d7682cd32a6d298837e92f7e14909641ad56f1e0ac7041a8

  • SSDEEP

    192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b27f61f44388f9cfdb0364659ed56c89e8da8aa22a6482f0f2f4dfb1c7d0d9c.exe
    "C:\Users\Admin\AppData\Local\Temp\4b27f61f44388f9cfdb0364659ed56c89e8da8aa22a6482f0f2f4dfb1c7d0d9c.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4284-0-0x0000000074F0E000-0x0000000074F0F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/4284-1-0x0000000000B10000-0x0000000000B1A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/4284-2-0x0000000005490000-0x0000000005522000-memory.dmp
    Filesize

    584KB

    Download
  • memory/4284-3-0x0000000005D20000-0x00000000062C4000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/4284-4-0x0000000074F00000-0x00000000756B0000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/4284-5-0x0000000006440000-0x00000000064A6000-memory.dmp
    Filesize

    408KB

    Download
  • memory/4284-6-0x0000000074F0E000-0x0000000074F0F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/4284-7-0x0000000074F00000-0x00000000756B0000-memory.dmp
    Filesize

    7.7MB

    Download