794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
01-02-2025 08:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
Size

1.7MB
MD5

545b6798551570ae6f9418768b9bddef
SHA1

6698d6c2b85df4c482f010217ed0afcc71ad0836
SHA256

794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844
SHA512

e91b4cc7157f63902986d4dafb6f660a9bd03b2b05a8f7b0ccce28fd5a160e9c35ee31623a49e6e029809216cb777938eeed1243dae1480cd2a2a535ca3fcbf6
SSDEEP

24576:thuExtIdE4sW5P6OTyOpp7vAtsXV59JbKb4F32GBp40LtDSVXT5Xv7Kkya8:thid1yOTyKYteb3PFxiXT5Xvr18

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
Token: SeDebugPrivilege	2020	794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe

C:\Users\Admin\AppData\Local\Temp\794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe
"C:\Users\Admin\AppData\Local\Temp\794c9a3ac15f53156d02883daa5712a4174a067809f82e500ebbec3b0ea97844.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x000007FEF5D23000-0x000007FEF5D24000-memory.dmp

Filesize
4KB

Download
memory/2020-1-0x0000000001DE0000-0x0000000001E14000-memory.dmp

Filesize
208KB

Download
memory/2020-2-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-3-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-4-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-5-0x0000000002180000-0x000000000218A000-memory.dmp

Filesize
40KB

Download
memory/2020-6-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-10-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-27-0x000007FEF5D23000-0x000007FEF5D24000-memory.dmp

Filesize
4KB

Download
memory/2020-28-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-29-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-30-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-31-0x0000000002180000-0x000000000218A000-memory.dmp

Filesize
40KB

Download
memory/2020-32-0x0000000002180000-0x000000000218A000-memory.dmp

Filesize
40KB

Download
memory/2020-33-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-34-0x000007FEF5D20000-0x000007FEF670C000-memory.dmp

Filesize
9.9MB

Download