Overview

overview

10

Static

static

10

a1217ece08...5b.exe

windows7-x64

1

a1217ece08...5b.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2025 01:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a1217ece08964fac63f4e462fc810ea167f9aad9ad9d579a798780bc1131e15b.exe

  • Size

    1.4MB

  • MD5

    831078d111236151af07b07f4a54e8c4

  • SHA1

    be33e011d0fe60961feb8ed5092fa1caa0f13574

  • SHA256

    a1217ece08964fac63f4e462fc810ea167f9aad9ad9d579a798780bc1131e15b

  • SHA512

    d297294464a3bf88e129558c3575e23cafcc1f089bd3dc2ac1c501171bd748a99ec00a8035c0a33b6bc3abc716d96dfea7fca34f9f8f9289f60fe08510b6eb9f

  • SSDEEP

    24576:kwwnjH+b/uSG1cM6ovhKTLa8mU9xy3PGKmPQmAmlfDSS5bJ7n:G4GqFOhiaTU9E/NUV7n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a1217ece08964fac63f4e462fc810ea167f9aad9ad9d579a798780bc1131e15b.exe
    "C:\Users\Admin\AppData\Local\Temp\a1217ece08964fac63f4e462fc810ea167f9aad9ad9d579a798780bc1131e15b.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2364-0-0x000007FEF5413000-0x000007FEF5414000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2364-1-0x0000000000240000-0x000000000027E000-memory.dmp

    Filesize

    248KB

    Download

  • memory/2364-2-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-3-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-4-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-7-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-10-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-9-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-11-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-25-0x000007FEF5413000-0x000007FEF5414000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2364-26-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-27-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-31-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-35-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-36-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-37-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-38-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2364-39-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

    Filesize

    9.9MB

    Download