1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
26/01/2025, 18:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
Size

1.4MB
MD5

2d2b91863e331af36bb19d6e82abd842
SHA1

dcbf7f5751ecf7cd4035f61b652ae0097e8481c7
SHA256

1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6
SHA512

25f3cd7531d4f26ad7d3dd37ab197f927bb0c5c007eae41b1bc1db734774c504a6ccf211877a33d1a9e1203bc4823c47fbc7e397a6a947b9ed31a331e96fd94b
SSDEEP

24576:++NXDnJ3P1BtHrVRtm3Aqa7HYdxTQt7zkpbJ7vDSKuSbK:zJ39TLV+3zNQuV74SG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
Token: SeDebugPrivilege	1372	1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe

C:\Users\Admin\AppData\Local\Temp\1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe
"C:\Users\Admin\AppData\Local\Temp\1cf377b43b56a0301136ed545c3e7b0347315519ae63ec5c62540c158076aac6.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\FLiNGTrainer\TrainerSettings.ini

Filesize
29B

MD5
100ad43a6e39d44013fad7f3aa343e3b

SHA1
dc8050bdee8a74354cb4a2057e4e703e7a460943

SHA256
a7b15ee77dd0db946e7fdbf574889bd30c23fa3d7bff6d509df118595ee14ec5

SHA512
20f9b26416804f917d0642d35de32ccae0849c34bff4eb75c6450b1ee83756f3275850101d7482eb59c78356b1489c2d4db6cd95ae9b72b64d5eeab700d36ba8

Download Submit
memory/1372-12-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-14-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-2-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-4-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-7-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-10-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-11-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-0-0x000007FEF5DC3000-0x000007FEF5DC4000-memory.dmp

Filesize
4KB

Download
memory/1372-3-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-35-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-1-0x0000000000370000-0x00000000003AE000-memory.dmp

Filesize
248KB

Download
memory/1372-34-0x000007FEF5DC3000-0x000007FEF5DC4000-memory.dmp

Filesize
4KB

Download
memory/1372-38-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-39-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-40-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-41-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download
memory/1372-42-0x000007FEF5DC0000-0x000007FEF67AC000-memory.dmp

Filesize
9.9MB

Download