Analysis

  • max time kernel
    135s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-08-2024 22:58

General

  • Target

    HadesKey SE.exe

  • Size

    769KB

  • MD5

    6e2475120c6b8897a62f93bf3f757d9f

  • SHA1

    f2cab685014834e81a7baa4338bd0b2ed910ecd2

  • SHA256

    046bf49f118e290386fa713b90eed77b14be0e3c519f5e54c8facb928cde8272

  • SHA512

    1d105542fb5ffe3dc764f676f53cfd436e66a747a787f1a4399ee86f67ef4b803c50673c8df0e5f970463159e1e54c0c1e5e70b0b142915d76204e35db155535

  • SSDEEP

    12288:sGL0MnO+zd9sNVz/TmUpNMdbU5NpS5R+V63EWD/DnTAWtC5UVwV:VYMnjPsNBKmpS5R+V6UWDDTDtC

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HadesKey SE.exe
    "C:\Users\Admin\AppData\Local\Temp\HadesKey SE.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2684-0-0x00007FFDEC535000-0x00007FFDEC536000-memory.dmp

    Filesize

    4KB

  • memory/2684-1-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB

  • memory/2684-2-0x000000001C550000-0x000000001CA1E000-memory.dmp

    Filesize

    4.8MB

  • memory/2684-3-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB

  • memory/2684-4-0x000000001BFC0000-0x000000001C066000-memory.dmp

    Filesize

    664KB

  • memory/2684-5-0x000000001CAE0000-0x000000001CB7C000-memory.dmp

    Filesize

    624KB

  • memory/2684-6-0x0000000001990000-0x0000000001998000-memory.dmp

    Filesize

    32KB

  • memory/2684-7-0x000000001CD40000-0x000000001CD8C000-memory.dmp

    Filesize

    304KB

  • memory/2684-8-0x000000001D7F0000-0x000000001D8A2000-memory.dmp

    Filesize

    712KB

  • memory/2684-11-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB

  • memory/2684-12-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB

  • memory/2684-13-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB

  • memory/2684-15-0x00007FFDEC280000-0x00007FFDECC21000-memory.dmp

    Filesize

    9.6MB