Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    30-01-2025 19:53

General

  • Target

    84a7fcdb4f44190092e6ec8b4a7a0aa40f1b61943a78c6bfd75055e7b5089954.exe

  • Size

    1.4MB

  • MD5

    f8720dd2c07bdb66761ac7b54760aaaf

  • SHA1

    b3e1d4137352e4fddcf99d6681702252c32e5d25

  • SHA256

    84a7fcdb4f44190092e6ec8b4a7a0aa40f1b61943a78c6bfd75055e7b5089954

  • SHA512

    baa1a60cc793f518e2d9e4570c410d74b3093d2e8d42221acd15eee1d9f943baa879910b8ff6f83112f80a268627404fdeaef8d7c7996f6b4c954f016c7ff1b4

  • SSDEEP

    24576:N9/QSW61N8Lqpgz7R0Ahn5nRQfbJ7MiYPDS/R:OeyepURPh5nRQfV7D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\84a7fcdb4f44190092e6ec8b4a7a0aa40f1b61943a78c6bfd75055e7b5089954.exe
    "C:\Users\Admin\AppData\Local\Temp\84a7fcdb4f44190092e6ec8b4a7a0aa40f1b61943a78c6bfd75055e7b5089954.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2328-0-0x000007FEF4EE3000-0x000007FEF4EE4000-memory.dmp

    Filesize

    4KB

  • memory/2328-1-0x0000000001C70000-0x0000000001CA2000-memory.dmp

    Filesize

    200KB

  • memory/2328-2-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-3-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-4-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-7-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-9-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-10-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-11-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-27-0x000007FEF4EE3000-0x000007FEF4EE4000-memory.dmp

    Filesize

    4KB

  • memory/2328-28-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-29-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-30-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-31-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-32-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-33-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB

  • memory/2328-34-0x000007FEF4EE0000-0x000007FEF58CC000-memory.dmp

    Filesize

    9.9MB