Overview

overview

3

Static

static

3

51119fc49f...d7.exe

windows7-x64

1

51119fc49f...d7.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-06-2024 01:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    51119fc49fd5946c2a862e644be040dee4a21d35bc4282491c0d3d9162f384d7.exe

  • Size

    605KB

  • MD5

    02880653c58152ddf8d55b6aff5416b6

  • SHA1

    c3a774b5e74634aeba352cd1344b0319bd9a1dd9

  • SHA256

    51119fc49fd5946c2a862e644be040dee4a21d35bc4282491c0d3d9162f384d7

  • SHA512

    d3b465fdedb514870e5e3e63bf457cafd7a51cbf4b28b6225d0dc7ee551fd6f3316bf653f4868ae809eb7bd051e627a3c3c2638247d6890896ed44b88ed51042

  • SSDEEP

    12288:HF3L+fySOgIFfOUyb8WaLMJEEfSh25z0oCDJ:cxAODlaMfSh25QLDJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\51119fc49fd5946c2a862e644be040dee4a21d35bc4282491c0d3d9162f384d7.exe
    "C:\Users\Admin\AppData\Local\Temp\51119fc49fd5946c2a862e644be040dee4a21d35bc4282491c0d3d9162f384d7.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3128-0-0x0000000074AFE000-0x0000000074AFF000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3128-1-0x0000000000AB0000-0x0000000000B4C000-memory.dmp

    Filesize

    624KB

    Download

  • memory/3128-2-0x0000000005A00000-0x0000000005FA4000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/3128-3-0x0000000005570000-0x0000000005602000-memory.dmp

    Filesize

    584KB

    Download

  • memory/3128-4-0x0000000005830000-0x000000000583A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/3128-5-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-6-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-7-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-8-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-9-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-10-0x000000000B460000-0x000000000B7B4000-memory.dmp

    Filesize

    3.3MB

    Download

  • memory/3128-11-0x000000000B3E0000-0x000000000B402000-memory.dmp

    Filesize

    136KB

    Download

  • memory/3128-12-0x000000000B7C0000-0x000000000B7D2000-memory.dmp

    Filesize

    72KB

    Download

  • memory/3128-13-0x000000000B820000-0x000000000B85C000-memory.dmp

    Filesize

    240KB

    Download

  • memory/3128-16-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-17-0x0000000074AFE000-0x0000000074AFF000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3128-18-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-19-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-20-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-21-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-22-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/3128-23-0x0000000074AF0000-0x00000000752A0000-memory.dmp

    Filesize

    7.7MB

    Download