Overview

overview

10

Static

static

10

f584f8f404...9a.exe

windows7-x64

1

f584f8f404...9a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2025 17:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f584f8f404380987ca496a333dc68ae21bfd5dca4b92132b53ae74b7873a3a9a.exe

  • Size

    1.5MB

  • MD5

    daf98e2f7836e0b6a5da1826c2e812b7

  • SHA1

    73548c0e3962638d703bbcb6d146fd4b12d5b3e9

  • SHA256

    f584f8f404380987ca496a333dc68ae21bfd5dca4b92132b53ae74b7873a3a9a

  • SHA512

    a5850d968de7494bf8b2a01b506a9fd48cf28703c19bae9366ae588a08f524fb53d8ef905cd4169a40c09f1e72f5d1841e18047538908c0a1efe3eab94caa740

  • SSDEEP

    24576:sq43+QGag0nB/oZGF3quJPrvQ21DSVXT5X9U6oya3AWOEF:Z+GalnOcBPzJKXT5Xu1w4F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f584f8f404380987ca496a333dc68ae21bfd5dca4b92132b53ae74b7873a3a9a.exe
    "C:\Users\Admin\AppData\Local\Temp\f584f8f404380987ca496a333dc68ae21bfd5dca4b92132b53ae74b7873a3a9a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2216-0-0x000007FEF58A3000-0x000007FEF58A4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2216-1-0x0000000000350000-0x0000000000384000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2216-2-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-3-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-4-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-5-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-6-0x0000000000410000-0x000000000041A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2216-7-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-11-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-12-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-31-0x000007FEF58A3000-0x000007FEF58A4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2216-32-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-33-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-34-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-35-0x0000000000410000-0x000000000041A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2216-36-0x0000000000410000-0x000000000041A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2216-37-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2216-38-0x000007FEF58A0000-0x000007FEF628C000-memory.dmp

    Filesize

    9.9MB

    Download