Overview

overview

10

Static

static

10

Malware-1-master.zip

windows7-x64

1

Malware-1-...30.exe

windows7-x64

10

Malware-1-...40.exe

windows7-x64

10

Malware-1-...32.exe

windows7-x64

10

Malware-1-.../5.exe

windows7-x64

10

Malware-1-...91.exe

windows7-x64

10

Malware-1-...ey.exe

windows7-x64

7

Malware-1-....0.zip

windows7-x64

1

Malware-1-...ad.exe

windows7-x64

3

Malware-1-...ti.exe

windows7-x64

5

Malware-1-...an.bat

windows7-x64

7

Malware-1-...an.exe

windows7-x64

3

Malware-1-...ve.bat

windows7-x64

7

Malware-1-...ve.exe

windows7-x64

6

Malware-1-...ya.exe

windows7-x64

6

Malware-1-...re.exe

windows7-x64

10

Malware-1-...ry.exe

windows7-x64

10

Malware-1-...ck.exe

windows7-x64

3

Malware-1-...he.exe

windows7-x64

10

Malware-1-...op.exe

windows7-x64

7

Malware-1-...rb.exe

windows7-x64

10

Malware-1-...ue.exe

windows7-x64

1

Malware-1-...ng.exe

windows7-x64

6

Malware-1-...kt.bat

windows7-x64

7

Malware-1-...o3.exe

windows7-x64

10

Malware-1-...ey.exe

windows7-x64

10

Malware-1-.../m.exe

windows7-x64

Malware-1-...o3.exe

windows7-x64

9

Malware-1-...dme.md

windows7-x64

3

Malware-1-...er.zip

windows7-x64

1

Malware-1-...ic.exe

windows7-x64

3

Malware-1-...in.exe

windows7-x64

10

Resubmissions

13-01-2025 04:35

250113-e7x5tswlfz 10

13-01-2025 03:52

250113-ee43nsvjby 10

12-01-2025 15:57

250112-tealdsymgt 10

12-01-2025 15:53

250112-tbnc3s1mhn 10

Analysis

  • max time kernel
    10s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2025 15:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Malware-1-master/fear.png.exe

  • Size

    66KB

  • MD5

    60ffde3dd3003cd24feeba26e47e6571

  • SHA1

    e6c57a55ca93b1f6ebccb8c5fe9757fd0801eea3

  • SHA256

    101678f77a65b5b5830a128e4c737b2aaaea5be95327ec68213ebb92e4251170

  • SHA512

    0a448886296c1f67760f2e09cbc226955c5abd833b6e7b2ce146cc673ddacca7bfbc59f2fa3f3a83381e7d67a0a677c487fc343833e3834dce84e00a6d286ca5

  • SSDEEP

    768:AQyHrxwRjWjPc/u1SDSepzEtYcF6HKc6K:AJHrOWjPcmSDSepz46Kcl

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Malware-1-master\fear.png.exe
    "C:\Users\Admin\AppData\Local\Temp\Malware-1-master\fear.png.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 3008 -s 1464
      2⤵
        PID:2944

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3008-0-0x000007FEF5E03000-0x000007FEF5E04000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3008-1-0x0000000000130000-0x0000000000146000-memory.dmp

      Filesize

      88KB

      Download

    • memory/3008-2-0x000007FEF5E00000-0x000007FEF67EC000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/3008-3-0x000007FEF5E00000-0x000007FEF67EC000-memory.dmp

      Filesize

      9.9MB

      Download