d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
29-01-2025 15:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
Size

1.4MB
MD5

1539e762b334c6c902ae6a3b704592e7
SHA1

ad2f47b433f5e4a761b2fdfce16fe9bbc3bf106e
SHA256

d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc
SHA512

ff9af15992c96fe9a396d157d545596adbf1c7fbdfeb84eb4dc6c9facef2f794b123fb09315842e83df188cd55b06d260a118091ca64e4f46d7c95aa0b1bfbe9
SSDEEP

24576:8tFS4j1cVPdZ8bBHeNxfMCrMhvHyZkno8DSdAqKWbJ7B:eriVabB+NeCANRofV7B

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	800	d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe

C:\Users\Admin\AppData\Local\Temp\d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe
"C:\Users\Admin\AppData\Local\Temp\d4d4900f4163048d82f19677c9809559756315a4337b5570994fb2483130f1bc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/800-0-0x000007FEF67F3000-0x000007FEF67F4000-memory.dmp

Filesize
4KB

Download
memory/800-1-0x0000000000250000-0x000000000028E000-memory.dmp

Filesize
248KB

Download
memory/800-2-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-3-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-4-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-7-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-9-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-10-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-11-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-35-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-34-0x000007FEF67F3000-0x000007FEF67F4000-memory.dmp

Filesize
4KB

Download
memory/800-36-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-37-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-38-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-39-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-40-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download
memory/800-41-0x000007FEF67F0000-0x000007FEF71DC000-memory.dmp

Filesize
9.9MB

Download