Overview

overview

10

Static

static

10

9a29db5541...f0.exe

windows7-x64

1

9a29db5541...f0.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2025 13:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9a29db55412b6208848b847c68fa69e60e3bba67d535200ed9113b5edb95baf0.exe

  • Size

    1.5MB

  • MD5

    7f16d3f0f124e0ad41ff95814dcf481e

  • SHA1

    f81a25622c65407eca4d249790970a86c128713f

  • SHA256

    9a29db55412b6208848b847c68fa69e60e3bba67d535200ed9113b5edb95baf0

  • SHA512

    db2cdec50b0a20d84b735a20906f37a1b3181c43e018cb4c972d48052d34b791a56af73e336e56591bd6e56e6ed3917cfa9bdaf45c8a9dd7205254d9d332592c

  • SSDEEP

    24576:SLolv7yqDDPgkZsFXz6ddhp6Q6pCDSVXT5XMhQadya3AWOEJ:+sGqDDPgk+F2DpfeXT5XMhjd1w4J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9a29db55412b6208848b847c68fa69e60e3bba67d535200ed9113b5edb95baf0.exe
    "C:\Users\Admin\AppData\Local\Temp\9a29db55412b6208848b847c68fa69e60e3bba67d535200ed9113b5edb95baf0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2856-0-0x000007FEF5CC3000-0x000007FEF5CC4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2856-1-0x0000000001C70000-0x0000000001CA4000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2856-2-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-3-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-4-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-5-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-7-0x0000000001DB0000-0x0000000001DBA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2856-6-0x0000000001DB0000-0x0000000001DBA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2856-8-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-12-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-35-0x000007FEF5CC3000-0x000007FEF5CC4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2856-36-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-37-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-38-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-39-0x0000000001DB0000-0x0000000001DBA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2856-40-0x0000000001DB0000-0x0000000001DBA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2856-41-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2856-42-0x000007FEF5CC0000-0x000007FEF66AC000-memory.dmp

    Filesize

    9.9MB

    Download