Overview

overview

10

Static

static

10

2024-12-25...9f.exe

windows7-x64

5

2024-12-25...9f.exe

windows10-2004-x64

5

2024-12-25...88.pdf

windows7-x64

3

2024-12-25...88.pdf

windows10-2004-x64

3

2024-12-25...e2.exe

windows7-x64

1

2024-12-25...e2.exe

windows10-2004-x64

1

2024-12-25...20.exe

windows7-x64

5

2024-12-25...20.exe

windows10-2004-x64

5

2024-12-25...07.pdf

windows7-x64

3

2024-12-25...07.pdf

windows10-2004-x64

3

2024-12-25...f3.pdf

windows7-x64

3

2024-12-25...f3.pdf

windows10-2004-x64

3

2024-12-25...86.pdf

windows7-x64

3

2024-12-25...86.pdf

windows10-2004-x64

3

2024-12-25...7f.exe

windows7-x64

10

2024-12-25...7f.exe

windows10-2004-x64

10

2024-12-25...b5.exe

windows7-x64

7

2024-12-25...b5.exe

windows10-2004-x64

7

2024-12-25...e1.exe

windows7-x64

5

2024-12-25...e1.exe

windows10-2004-x64

5

2024-12-25...32.exe

windows7-x64

1

2024-12-25...32.exe

windows10-2004-x64

8

2024-12-25...d8.exe

windows7-x64

7

2024-12-25...d8.exe

windows10-2004-x64

7

2024-12-25...f4.exe

windows7-x64

2024-12-25...f4.exe

windows10-2004-x64

2024-12-25...27.exe

windows7-x64

3

2024-12-25...27.exe

windows10-2004-x64

3

2024-12-25...55.pdf

windows7-x64

3

2024-12-25...55.pdf

windows10-2004-x64

3

2024-12-25...66.pdf

windows7-x64

3

2024-12-25...66.pdf

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    31-01-2025 17:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-12-25/unknown-c9b4bcd53dae4000069befc3a53329f4ad7f104b8823fefe389ed280cde1c8e2.exe

  • Size

    1.3MB

  • MD5

    5d3424428668d779f83f9798a6c4cc00

  • SHA1

    a8df2536f0adc4d4c2ecfaba8b1d363d55f10b4a

  • SHA256

    c9b4bcd53dae4000069befc3a53329f4ad7f104b8823fefe389ed280cde1c8e2

  • SHA512

    81d54419fbea6e008cfbaf5559d0cf3d28abfe432b60cce04fb947f13e0a87bd97aa706ac870bb724474bd6c79e533dc98690afab6d1ac1e7b72f3e8d8ea3002

  • SSDEEP

    24576:kz9GkqDjo0IVw226WctECfw+Jwz/S/67I7dK5HfGoeUQ5OKpmxGlid9YRg2V:wGjjo0Iu7gEow+W7SC7I7kfGorQ5EMS4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-c9b4bcd53dae4000069befc3a53329f4ad7f104b8823fefe389ed280cde1c8e2.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-c9b4bcd53dae4000069befc3a53329f4ad7f104b8823fefe389ed280cde1c8e2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Cab17D6.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar17E9.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    Download Submit

  • memory/2508-3-0x00000000022D0000-0x000000000232E000-memory.dmp

    Filesize

    376KB

    Download

  • memory/2508-0-0x000007FEF58D3000-0x000007FEF58D4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2508-4-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-5-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-6-0x000000001DC50000-0x000000001DD00000-memory.dmp

    Filesize

    704KB

    Download

  • memory/2508-7-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-2-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-1-0x0000000000B80000-0x0000000000CD0000-memory.dmp

    Filesize

    1.3MB

    Download

  • memory/2508-42-0x000007FEF58D3000-0x000007FEF58D4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2508-43-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-44-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2508-45-0x000007FEF58D0000-0x000007FEF62BC000-memory.dmp

    Filesize

    9.9MB

    Download