Overview

overview

10

Static

static

10

8d03a6844e...ce.exe

windows7-x64

1

8d03a6844e...ce.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-11-2024 06:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8d03a6844ee77ffac2bb6184b603b80b3878b96b0645c81f26bbf1ebcbe142ce.exe

  • Size

    1.7MB

  • MD5

    8ffd728d0056a6dbdc04e9f8b38be8c9

  • SHA1

    a389b773e92426755476bfbace195bcd55fb7c9c

  • SHA256

    8d03a6844ee77ffac2bb6184b603b80b3878b96b0645c81f26bbf1ebcbe142ce

  • SHA512

    49f317647a9deed8f52385f658dc010c1dbbac41faf554d7e2fbedb21bb2211bced8029d945eb1b3d0880e9ec83aaac2b270bd50d8c320daf120f0a682f0d6a3

  • SSDEEP

    24576:MrkZXbO6yZLQrC54NSGY1CiaZGjGpDSVXT5XrqE1agKya:MgZtyZkrC54YGWk+XT5Xesan1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8d03a6844ee77ffac2bb6184b603b80b3878b96b0645c81f26bbf1ebcbe142ce.exe
    "C:\Users\Admin\AppData\Local\Temp\8d03a6844ee77ffac2bb6184b603b80b3878b96b0645c81f26bbf1ebcbe142ce.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2124-0-0x000007FEF5423000-0x000007FEF5424000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2124-1-0x0000000000240000-0x0000000000274000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2124-2-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-3-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-4-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-5-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-6-0x00000000002A0000-0x00000000002AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2124-7-0x00000000002A0000-0x00000000002AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2124-8-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-12-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-13-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-27-0x000007FEF5423000-0x000007FEF5424000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2124-37-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-38-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-39-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-40-0x00000000002A0000-0x00000000002AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2124-41-0x00000000002A0000-0x00000000002AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2124-42-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2124-43-0x000007FEF5420000-0x000007FEF5E0C000-memory.dmp

    Filesize

    9.9MB

    Download