Analysis

  • max time kernel
    65s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2025 08:51

General

  • Target

    aef2e9de4a46b3b364cfdae26115e8dd76995ad831ee31a7b1591cb5a008afa4.exe

  • Size

    1.2MB

  • MD5

    d978ab2e916fbd424a69bb9e64011d7f

  • SHA1

    0d2c13eedd7dee78b5bfcd8bf583181c9fd2bc46

  • SHA256

    aef2e9de4a46b3b364cfdae26115e8dd76995ad831ee31a7b1591cb5a008afa4

  • SHA512

    1748d6b4b348a1810fcbd8b212efa291a596289930a072221276ec5d2dd8414aa84335a9ae4e3e54efe388ac4072c0859d97ac70d91a3af005d844ee960a8f2d

  • SSDEEP

    24576:vIrD450Q09Pmt8KYfKeskLpzbBSo3sYDSR95bJ7S:+c0nPIrNKV9m5V7S

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aef2e9de4a46b3b364cfdae26115e8dd76995ad831ee31a7b1591cb5a008afa4.exe
    "C:\Users\Admin\AppData\Local\Temp\aef2e9de4a46b3b364cfdae26115e8dd76995ad831ee31a7b1591cb5a008afa4.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1628-0-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

  • memory/1628-1-0x0000000000410000-0x000000000044E000-memory.dmp

    Filesize

    248KB

  • memory/1628-2-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-3-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-4-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-5-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-6-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

  • memory/1628-7-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-8-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-9-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-10-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/1628-11-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB