089b9af9ccab56dc15339777ed6435b0aa9d12f1f50481a5342dbd61c4264da5 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 06:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

LGBeanFi.exe
Size

471KB
MD5

31f7adc301e5f365e4c85ad33308c44d
SHA1

19e92f86e9330550107433494a2d1069b02804c5
SHA256

f949fabc3c59ccff12fff46598d9bcb1702b3e70e14db6d60db2d72f0073b61b
SHA512

4d66c9eb8af4945934bf7fca5bac3748c62d5566d2713cf428439ff452cb90d58cb11a4811b31b0311a055c62a575fb862483c92fdb4b3bd38721e31dba83dd6
SSDEEP

12288:/M/B4C2l7tZQezi6DVgox2Ye1+FL5o49izLTEBFE7T/:/m72bgUy49kTEB6n

Score

1^/10

Malware Config

Signatures

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
480	Process not Found

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2420	LGBeanFi.exe
Token: SeShutdownPrivilege	2420	LGBeanFi.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2420	LGBeanFi.exe
2420	LGBeanFi.exe

C:\Users\Admin\AppData\Local\Temp\LGBeanFi.exe
"C:\Users\Admin\AppData\Local\Temp\LGBeanFi.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads