Overview

overview

7

Static

static

3

cfac54dd89...f1.exe

windows7-x64

7

cfac54dd89...f1.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    103s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/09/2024, 06:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    cfac54dd89e842cf546b0347f1943ad0eba0740273bf3e29d109ab1c6ba4ccf1.exe

  • Size

    2.0MB

  • MD5

    8071b979f383cc48597c18ecc1f8debc

  • SHA1

    47ebc63c67190d6588e256de17dd6fd3f276a33e

  • SHA256

    cfac54dd89e842cf546b0347f1943ad0eba0740273bf3e29d109ab1c6ba4ccf1

  • SHA512

    234fcd76b9be254b670b5866a8232d2292b089ba8a5d02103a8b2dc6bb98381b64d68f8b038f981754610bf931166809e2b44d9d310b9e1f5c54ba8da3d52cf6

  • SSDEEP

    24576:kBxcqhG/e37rZ83+zdToZJoAOM08/85RkptVIJqeatr0zAiX90z/F0jsFB3SQk:UQi7tbYOMjUfkptVxeaB0zj0yjoB2

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cfac54dd89e842cf546b0347f1943ad0eba0740273bf3e29d109ab1c6ba4ccf1.exe
    "C:\Users\Admin\AppData\Local\Temp\cfac54dd89e842cf546b0347f1943ad0eba0740273bf3e29d109ab1c6ba4ccf1.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1880

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\JavaLauncher.log
          Filesize

          2KB

          MD5

          3d8aa878ccc68978fd76c66b62bb0b3b

          SHA1

          1efdc222d5bc1a785909f7670038665e270a7e61

          SHA256

          99244607601d28dc00d4c8c7b7f46a9a2bc37bef394b73d3e4cb28d031f59e11

          SHA512

          fb3de322047b5a36bf440a28480edda030e4c01b3e59ea0ee7b6a955aa464012b7bd78864c83bde2b6ecd5076303fdccc8533f8795bfcc00d2b3b8dfcdfa1242

          Download Submit

        • memory/1880-0-0x0000000001F80000-0x0000000001FE0000-memory.dmp

          Filesize

          384KB

          Download

        • memory/1880-14-0x0000000001F80000-0x0000000001FE0000-memory.dmp

          Filesize

          384KB

          Download

        • memory/1880-11-0x0000000140000000-0x00000001401FB000-memory.dmp

          Filesize

          2.0MB

          Download

        • memory/1880-21-0x0000000140000000-0x00000001401FB000-memory.dmp

          Filesize

          2.0MB

          Download