Overview

overview

10

Static

static

10

4280bf4db4...d6.exe

windows7-x64

1

4280bf4db4...d6.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2025 19:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4280bf4db4d8250d942d0b35def272a27e6649fd575f3ff3f75c1a555ac6fcd6.exe

  • Size

    2.0MB

  • MD5

    b4d4678597c76922b52e84f7823d7867

  • SHA1

    0a8b0954490efbf383b83fc5f68d284e0a639aa6

  • SHA256

    4280bf4db4d8250d942d0b35def272a27e6649fd575f3ff3f75c1a555ac6fcd6

  • SHA512

    1334fe98f1548dd14b666f57505f9879d7e3b2832eee364e86fce8bb7bfa5b422145bc40c0a105e6efd3ece5df393450f4fb672e151207d397a2a3b9d21890a1

  • SSDEEP

    49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM1i:A8OOaS36D5r1i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4280bf4db4d8250d942d0b35def272a27e6649fd575f3ff3f75c1a555ac6fcd6.exe
    "C:\Users\Admin\AppData\Local\Temp\4280bf4db4d8250d942d0b35def272a27e6649fd575f3ff3f75c1a555ac6fcd6.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2712-0-0x000007FEF56A3000-0x000007FEF56A4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2712-1-0x00000000020B0000-0x00000000020E4000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2712-2-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-3-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-4-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-5-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-7-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2712-8-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-6-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2712-12-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-31-0x000007FEF56A3000-0x000007FEF56A4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2712-32-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-33-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-34-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-35-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2712-36-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2712-37-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2712-38-0x000007FEF56A0000-0x000007FEF608C000-memory.dmp

    Filesize

    9.9MB

    Download