Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2025 16:56

General

  • Target

    c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe

  • Size

    1.2MB

  • MD5

    df84c2dcc44fe1921cbd786b92eebad2

  • SHA1

    394b05dd67cdb65d8874abb1b9818fc008e8260f

  • SHA256

    c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da

  • SHA512

    4c205af89a031d738e1247e787e208fce2c068d8ebb7a83da3b5657cdb3ed2ed9a2c2fced22781ea8fcfd93d32d3726122a07db68c62542aeff43c99e2dff992

  • SSDEEP

    24576:osIV0SK7h5Yy4rxUMhWpOlZAb6utlJVdeeWIguOL+4nDS2bJ7l:oR0V49USWz6ZfjL+4lV7l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe
    "C:\Users\Admin\AppData\Local\Temp\c8030bd70bda093948c8ad6e6b18d9872c9972ae4f55c7806afaba0e120541da.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2068-0-0x000007FEF5B23000-0x000007FEF5B24000-memory.dmp

    Filesize

    4KB

  • memory/2068-1-0x0000000000350000-0x0000000000398000-memory.dmp

    Filesize

    288KB

  • memory/2068-2-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-3-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-4-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-7-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-9-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-10-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-33-0x000007FEF5B23000-0x000007FEF5B24000-memory.dmp

    Filesize

    4KB

  • memory/2068-34-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-35-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-36-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-37-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-38-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB

  • memory/2068-39-0x000007FEF5B20000-0x000007FEF650C000-memory.dmp

    Filesize

    9.9MB