Overview

overview

10

Static

static

10

Avernus/Av...us.exe

windows7-x64

1

Avernus/Av...us.exe

windows10-2004-x64

1

DLL/Built.exe

windows7-x64

7

DLL/Built.exe

windows10-2004-x64

8

Avernus/Av...xe.lnk

windows7-x64

3

Avernus/Av...xe.lnk

windows10-2004-x64

3

Avernus/Av...or.exe

windows7-x64

7

Avernus/Av...or.exe

windows10-2004-x64

8

Avernus/Av...pi.dll

windows7-x64

1

Avernus/Av...pi.dll

windows10-2004-x64

1

Avernus/Av...ct.dll

windows7-x64

1

Avernus/Av...ct.dll

windows10-2004-x64

7

Avernus/Av...ct.dll

windows7-x64

1

Avernus/Av...ct.dll

windows10-2004-x64

1

Avernus/Av...64.dll

windows7-x64

1

Avernus/Av...64.dll

windows10-2004-x64

1

Avernus/Av...64.dll

windows7-x64

1

Avernus/Av...64.dll

windows10-2004-x64

1

Avernus/Av...sh.dll

windows7-x64

1

Avernus/Av...sh.dll

windows10-2004-x64

1

Avernus/Av...td.dll

windows7-x64

1

Avernus/Av...td.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    03-11-2024 19:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Avernus/Avernus/Avernus.exe

  • Size

    26KB

  • MD5

    32f006dfd6e5398112459024c77d1ee6

  • SHA1

    36c76a0f06ddc2f4eebfb4d27827ed44cd5e5ed6

  • SHA256

    57f38af93d01730d3046d79462cca62c8d7a97c052c48f59e4ec02b2dc497375

  • SHA512

    3954d128d88c93a097500b4563afcd29f5017675c98f1a58e878798cb0c68f020d4ce68aa75190f69873927d9db16b482bf60941493f50cb7ca5b03d87c4c659

  • SSDEEP

    384:lrA5gZ2zi9Zfg7N+G2TB0dkvwKwq6u3H37nokwMwA2GVYEmsREwmTRwXEO1efBfv:BA5g7ZId2TBrSHs/cRwXF1qyPPI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Avernus\Avernus\Avernus.exe
    "C:\Users\Admin\AppData\Local\Temp\Avernus\Avernus\Avernus.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1736-0-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1736-1-0x000000013FA90000-0x000000013FA9C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/1736-2-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/1736-3-0x0000000002490000-0x0000000002498000-memory.dmp

    Filesize

    32KB

    Download

  • memory/1736-4-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/1736-5-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

    Download

  • memory/1736-6-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/1736-7-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

    Download