Overview

overview

10

Static

static

10

ac4a7f40c1...a6.exe

windows7-x64

1

ac4a7f40c1...a6.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2025 16:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ac4a7f40c1e7df75ac4b36a3dbc6e39237f4effe97c72df66cc1d27f12550ea6.exe

  • Size

    1.2MB

  • MD5

    92ebb831e09b90b7119f263e99c079d2

  • SHA1

    c87cf7f77507f67701ab6cecd7b9e87c759aeffb

  • SHA256

    ac4a7f40c1e7df75ac4b36a3dbc6e39237f4effe97c72df66cc1d27f12550ea6

  • SHA512

    045e3aa8a5d45b4b464b05b2efb50310b479e69314cf5a9e8fa5e7a9a8691940b79c6f3e973ed5848b97dafd0524be02f6d2387894246e2c8f14167db0d9464d

  • SSDEEP

    24576:Bu0LAmgdoVfe2GiwfT7Pk2HeyLQrOyaSPvftPS:9kmgdge2GvfThHT1mvVK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac4a7f40c1e7df75ac4b36a3dbc6e39237f4effe97c72df66cc1d27f12550ea6.exe
    "C:\Users\Admin\AppData\Local\Temp\ac4a7f40c1e7df75ac4b36a3dbc6e39237f4effe97c72df66cc1d27f12550ea6.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3040-0-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-1-0x00000000002F0000-0x000000000032E000-memory.dmp

    Filesize

    248KB

    Download

  • memory/3040-2-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-3-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-4-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-5-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-7-0x0000000002180000-0x000000000218A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/3040-6-0x0000000002180000-0x000000000218A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/3040-8-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-12-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-13-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-32-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-33-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-34-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-35-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-36-0x0000000002180000-0x000000000218A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/3040-37-0x0000000002180000-0x000000000218A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/3040-38-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-39-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download