Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2025 01:46

General

  • Target

    3150a729696818d76366e3ca053336d21a786c2f9630281ebdc9de1baf98ce27.exe

  • Size

    2.1MB

  • MD5

    d7a541661a87d4bf4441a68f38915f7a

  • SHA1

    929a5476d1132afdd097f24b47901fd599cc49be

  • SHA256

    3150a729696818d76366e3ca053336d21a786c2f9630281ebdc9de1baf98ce27

  • SHA512

    ee66a17f366e2dcd3f914f591ac5de06ff704ce8d3a7d8a3f0e2e0c51994949ca99047ce6ad6b533c1c456e4d1083edc02cf0660d07c197339b18d3c6d6e43f4

  • SSDEEP

    24576:qrQMuoqadRHFO8Wrv8BK7Npsccuy8EX6pnPs1I98DSVXT5Xhyya3AWOEJ:oioqWjO8bw7Dsc3y8PsIXT5Xhy1w4J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3150a729696818d76366e3ca053336d21a786c2f9630281ebdc9de1baf98ce27.exe
    "C:\Users\Admin\AppData\Local\Temp\3150a729696818d76366e3ca053336d21a786c2f9630281ebdc9de1baf98ce27.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2640-0-0x000007FEF5D23000-0x000007FEF5D24000-memory.dmp

    Filesize

    4KB

  • memory/2640-3-0x00000000004B0000-0x00000000004E4000-memory.dmp

    Filesize

    208KB

  • memory/2640-6-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

    Filesize

    9.9MB

  • memory/2640-7-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

    Filesize

    9.9MB

  • memory/2640-8-0x0000000000270000-0x000000000027A000-memory.dmp

    Filesize

    40KB

  • memory/2640-9-0x0000000000270000-0x000000000027A000-memory.dmp

    Filesize

    40KB

  • memory/2640-10-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

    Filesize

    9.9MB

  • memory/2640-32-0x000007FEF5D23000-0x000007FEF5D24000-memory.dmp

    Filesize

    4KB

  • memory/2640-33-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

    Filesize

    9.9MB

  • memory/2640-34-0x0000000000270000-0x000000000027A000-memory.dmp

    Filesize

    40KB

  • memory/2640-35-0x0000000000270000-0x000000000027A000-memory.dmp

    Filesize

    40KB

  • memory/2640-36-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

    Filesize

    9.9MB