Overview

overview

10

Static

static

10

Avernus/Av...us.exe

windows7-x64

1

Avernus/Av...us.exe

windows10-2004-x64

1

DLL/Built.exe

windows7-x64

7

DLL/Built.exe

windows10-2004-x64

8

Avernus/Av...xe.lnk

windows7-x64

3

Avernus/Av...xe.lnk

windows10-2004-x64

3

Avernus/Av...or.exe

windows7-x64

7

Avernus/Av...or.exe

windows10-2004-x64

8

Avernus/Av...pi.dll

windows7-x64

1

Avernus/Av...pi.dll

windows10-2004-x64

1

Avernus/Av...ct.dll

windows7-x64

1

Avernus/Av...ct.dll

windows10-2004-x64

7

Avernus/Av...ct.dll

windows7-x64

1

Avernus/Av...ct.dll

windows10-2004-x64

1

Avernus/Av...64.dll

windows7-x64

1

Avernus/Av...64.dll

windows10-2004-x64

1

Avernus/Av...64.dll

windows7-x64

1

Avernus/Av...64.dll

windows10-2004-x64

1

Avernus/Av...sh.dll

windows7-x64

1

Avernus/Av...sh.dll

windows10-2004-x64

1

Avernus/Av...td.dll

windows7-x64

1

Avernus/Av...td.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-11-2024 19:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Avernus/Avernus/Avernus.exe

  • Size

    26KB

  • MD5

    32f006dfd6e5398112459024c77d1ee6

  • SHA1

    36c76a0f06ddc2f4eebfb4d27827ed44cd5e5ed6

  • SHA256

    57f38af93d01730d3046d79462cca62c8d7a97c052c48f59e4ec02b2dc497375

  • SHA512

    3954d128d88c93a097500b4563afcd29f5017675c98f1a58e878798cb0c68f020d4ce68aa75190f69873927d9db16b482bf60941493f50cb7ca5b03d87c4c659

  • SSDEEP

    384:lrA5gZ2zi9Zfg7N+G2TB0dkvwKwq6u3H37nokwMwA2GVYEmsREwmTRwXEO1efBfv:BA5g7ZId2TBrSHs/cRwXF1qyPPI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Avernus\Avernus\Avernus.exe
    "C:\Users\Admin\AppData\Local\Temp\Avernus\Avernus\Avernus.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4144-0-0x00007FFCC5E13000-0x00007FFCC5E15000-memory.dmp

    Filesize

    8KB

    Download

  • memory/4144-1-0x0000021721770000-0x000002172177C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/4144-2-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4144-3-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4144-4-0x000002173BDC0000-0x000002173BDC8000-memory.dmp

    Filesize

    32KB

    Download

  • memory/4144-5-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4144-6-0x00007FFCC5E13000-0x00007FFCC5E15000-memory.dmp

    Filesize

    8KB

    Download

  • memory/4144-7-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4144-8-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download

  • memory/4144-9-0x00007FFCC5E10000-0x00007FFCC68D1000-memory.dmp

    Filesize

    10.8MB

    Download