Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-12-2024 07:55

General

  • Target

    Mail Access Checker by xRisky v2 [Free version]/Data/Modules/Checker1.exe

  • Size

    67.7MB

  • MD5

    ca4b373ccf1990360ecc5c0b6f0b3b14

  • SHA1

    8c385c650e51100aa5026f14f1b81d171b9fae4c

  • SHA256

    7d05137859424894e35840aaf22666de2f5a48cc59ee9c22b6044bf388ab52bf

  • SHA512

    b2987a1b8ddea877ee7da5b47146b8f60387b41dccaaaaa653f12f53d53abfc8fe7fe0d2a51e09e25ee8501b1634a4d0a888c45eb13172fd7c89a8b6fcf282c0

  • SSDEEP

    1572864:lRWKf5aPpViUdnDIbhoIDt05cLHljPqHq2MbIep/AexKhHRnfYsdW4dU:lRWKfipViUdDIFb9qKZDVx8dU4d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Mail Access Checker by xRisky v2 [Free version]\Data\Modules\Checker1.exe
    "C:\Users\Admin\AppData\Local\Temp\Mail Access Checker by xRisky v2 [Free version]\Data\Modules\Checker1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/348-1-0x000007FEF5B23000-0x000007FEF5B24000-memory.dmp

    Filesize

    4KB

  • memory/348-0-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-2-0x000000001B290000-0x000000001B430000-memory.dmp

    Filesize

    1.6MB

  • memory/348-4-0x000000001B290000-0x000000001B430000-memory.dmp

    Filesize

    1.6MB

  • memory/348-3-0x000000001B290000-0x000000001B430000-memory.dmp

    Filesize

    1.6MB

  • memory/348-25-0x0000000180000000-0x0000000180005000-memory.dmp

    Filesize

    20KB

  • memory/348-22-0x0000000180000000-0x0000000180005000-memory.dmp

    Filesize

    20KB

  • memory/348-19-0x0000000180000000-0x0000000180005000-memory.dmp

    Filesize

    20KB

  • memory/348-16-0x0000000180000000-0x0000000180005000-memory.dmp

    Filesize

    20KB

  • memory/348-14-0x0000000180000000-0x0000000180005000-memory.dmp

    Filesize

    20KB

  • memory/348-13-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-45-0x000000001D8E0000-0x000000001DA0A000-memory.dmp

    Filesize

    1.2MB

  • memory/348-37-0x000000001D7B0000-0x000000001D8DA000-memory.dmp

    Filesize

    1.2MB

  • memory/348-31-0x000000001D7B0000-0x000000001D8DA000-memory.dmp

    Filesize

    1.2MB

  • memory/348-29-0x000000001D7B0000-0x000000001D8DA000-memory.dmp

    Filesize

    1.2MB

  • memory/348-46-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-47-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-61-0x000000001B5A0000-0x000000001B5AA000-memory.dmp

    Filesize

    40KB

  • memory/348-53-0x000000001B590000-0x000000001B59A000-memory.dmp

    Filesize

    40KB

  • memory/348-62-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-51-0x000000001B590000-0x000000001B59A000-memory.dmp

    Filesize

    40KB

  • memory/348-49-0x000000001B590000-0x000000001B59A000-memory.dmp

    Filesize

    40KB

  • memory/348-48-0x000000001B590000-0x000000001B59A000-memory.dmp

    Filesize

    40KB

  • memory/348-64-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-63-0x000007FEF4460000-0x000007FEF458C000-memory.dmp

    Filesize

    1.2MB

  • memory/348-68-0x000000001B5A0000-0x000000001B5AA000-memory.dmp

    Filesize

    40KB

  • memory/348-69-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-67-0x000000001B5A0000-0x000000001B5AA000-memory.dmp

    Filesize

    40KB

  • memory/348-66-0x000000001B5A0000-0x000000001B5AA000-memory.dmp

    Filesize

    40KB

  • memory/348-71-0x000000001D8E0000-0x000000001DA0A000-memory.dmp

    Filesize

    1.2MB

  • memory/348-73-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-72-0x000000001D8E0000-0x000000001DA0A000-memory.dmp

    Filesize

    1.2MB

  • memory/348-77-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-78-0x000000001B5F0000-0x000000001B612000-memory.dmp

    Filesize

    136KB

  • memory/348-89-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-90-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-91-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-92-0x000000001EEF0000-0x000000002027C000-memory.dmp

    Filesize

    19.5MB

  • memory/348-93-0x0000000020380000-0x00000000208CE000-memory.dmp

    Filesize

    5.3MB

  • memory/348-94-0x00000000208D0000-0x00000000209C8000-memory.dmp

    Filesize

    992KB

  • memory/348-95-0x00000000209D0000-0x0000000020AC8000-memory.dmp

    Filesize

    992KB

  • memory/348-96-0x0000000021050000-0x000000002120E000-memory.dmp

    Filesize

    1.7MB

  • memory/348-97-0x0000000021210000-0x00000000218BC000-memory.dmp

    Filesize

    6.7MB

  • memory/348-98-0x0000000023BB0000-0x000000002438A000-memory.dmp

    Filesize

    7.9MB

  • memory/348-99-0x00000000218C0000-0x0000000021C6C000-memory.dmp

    Filesize

    3.7MB

  • memory/348-100-0x0000000024E00000-0x0000000025268000-memory.dmp

    Filesize

    4.4MB

  • memory/348-101-0x0000000020BD0000-0x0000000020C42000-memory.dmp

    Filesize

    456KB

  • memory/348-102-0x0000000025270000-0x0000000025484000-memory.dmp

    Filesize

    2.1MB

  • memory/348-103-0x0000000020C90000-0x0000000020CF8000-memory.dmp

    Filesize

    416KB

  • memory/348-104-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-105-0x000007FEF5B23000-0x000007FEF5B24000-memory.dmp

    Filesize

    4KB

  • memory/348-106-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-107-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-108-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-109-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-110-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-111-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-112-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-113-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-114-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-115-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-116-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-117-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-118-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-120-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-121-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-119-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-122-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-126-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-125-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-124-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-123-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-127-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-128-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-132-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-131-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-130-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/348-129-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB