Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2025 21:46

General

  • Target

    926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe

  • Size

    1.7MB

  • MD5

    cbab378af34f97a7dfac7fc5f609e83c

  • SHA1

    4a4835ead0b6f18cd9c91a56d1fe82893410e95f

  • SHA256

    926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1

  • SHA512

    55929d01a578d5b676cd841c0b5619b8c403af012cdb0778550663240479bef0eaa26c793eeba0042109fb08a957cb52767fc90aa41c9967ec45349cda6e3882

  • SSDEEP

    24576:u2QpUGbjXOnUxvF6FxoP0E8/7jKeRZMZPjyN4DSVXT5Xf5qqyaP:u2EbYUx96FxNEA7jL4WN9XT5XRv1P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe
    "C:\Users\Admin\AppData\Local\Temp\926fea0784dd8fd31f03c9eb902eec2702cd5c214e1811784475c7f61edf8bd1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2828-0-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

  • memory/2828-1-0x0000000000440000-0x0000000000474000-memory.dmp

    Filesize

    208KB

  • memory/2828-2-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-4-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-3-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-5-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-6-0x0000000001C30000-0x0000000001C3A000-memory.dmp

    Filesize

    40KB

  • memory/2828-7-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-11-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-30-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

  • memory/2828-31-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-32-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-33-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-34-0x0000000001C30000-0x0000000001C3A000-memory.dmp

    Filesize

    40KB

  • memory/2828-35-0x0000000001C30000-0x0000000001C3A000-memory.dmp

    Filesize

    40KB

  • memory/2828-36-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

  • memory/2828-37-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB