Overview

overview

10

Static

static

10

8c5eefadca...3a.exe

windows7-x64

1

8c5eefadca...3a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2025 20:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8c5eefadca62fd77c78deb7bb51038c9684e514d5b1009f8bff43f97c7ab633a.exe

  • Size

    1.9MB

  • MD5

    cbd7acc16c2101d49111b56467ef054a

  • SHA1

    340438506999618d62e0e823b04f994ed8b65c89

  • SHA256

    8c5eefadca62fd77c78deb7bb51038c9684e514d5b1009f8bff43f97c7ab633a

  • SHA512

    9d987d8ef356a0af93de641966c1c3f2d19e701e63ce01a66007f114311b9c4fe4ade43bdb5bb91f704b0dea09634ecf883b9330f588d998caffd7c612f4d37c

  • SSDEEP

    24576:OaBN1Bkj7a5E4nGEHJcbIJcHN3h0lhSMXlg37u3t81Q31wDSVXT5XeDKO5sya7:3Lkj7QGmJcbIJEwQc3DXT5XiKJ17

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c5eefadca62fd77c78deb7bb51038c9684e514d5b1009f8bff43f97c7ab633a.exe
    "C:\Users\Admin\AppData\Local\Temp\8c5eefadca62fd77c78deb7bb51038c9684e514d5b1009f8bff43f97c7ab633a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/628-0-0x000007FEF5D53000-0x000007FEF5D54000-memory.dmp

    Filesize

    4KB

    Download

  • memory/628-1-0x0000000001D70000-0x0000000001DA4000-memory.dmp

    Filesize

    208KB

    Download

  • memory/628-2-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-3-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-4-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-5-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-6-0x0000000001EA0000-0x0000000001EAA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/628-7-0x0000000001EA0000-0x0000000001EAA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/628-8-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-12-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-31-0x000007FEF5D53000-0x000007FEF5D54000-memory.dmp

    Filesize

    4KB

    Download

  • memory/628-32-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-33-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-34-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-35-0x0000000001EA0000-0x0000000001EAA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/628-36-0x0000000001EA0000-0x0000000001EAA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/628-37-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/628-38-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp

    Filesize

    9.9MB

    Download