Analysis

  • max time kernel
    16s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    01-08-2024 22:58

General

  • Target

    HadesKey SE.exe

  • Size

    769KB

  • MD5

    6e2475120c6b8897a62f93bf3f757d9f

  • SHA1

    f2cab685014834e81a7baa4338bd0b2ed910ecd2

  • SHA256

    046bf49f118e290386fa713b90eed77b14be0e3c519f5e54c8facb928cde8272

  • SHA512

    1d105542fb5ffe3dc764f676f53cfd436e66a747a787f1a4399ee86f67ef4b803c50673c8df0e5f970463159e1e54c0c1e5e70b0b142915d76204e35db155535

  • SSDEEP

    12288:sGL0MnO+zd9sNVz/TmUpNMdbU5NpS5R+V63EWD/DnTAWtC5UVwV:VYMnjPsNBKmpS5R+V6UWDDTDtC

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HadesKey SE.exe
    "C:\Users\Admin\AppData\Local\Temp\HadesKey SE.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2616-0-0x000007FEF6BFE000-0x000007FEF6BFF000-memory.dmp

    Filesize

    4KB

  • memory/2616-1-0x000007FEF6940000-0x000007FEF72DD000-memory.dmp

    Filesize

    9.6MB

  • memory/2616-2-0x000007FEF6940000-0x000007FEF72DD000-memory.dmp

    Filesize

    9.6MB

  • memory/2616-3-0x000000001BA00000-0x000000001BAB2000-memory.dmp

    Filesize

    712KB

  • memory/2616-4-0x000007FEF6940000-0x000007FEF72DD000-memory.dmp

    Filesize

    9.6MB

  • memory/2616-5-0x000007FEF6940000-0x000007FEF72DD000-memory.dmp

    Filesize

    9.6MB

  • memory/2616-6-0x000007FEF6940000-0x000007FEF72DD000-memory.dmp

    Filesize

    9.6MB