Overview

overview

10

Static

static

10

29452d833c...a3.exe

windows7-x64

1

29452d833c...a3.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2025 14:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    29452d833ca8391084ef82951b44fff91a2511ee2708afc82352eddc711116a3.exe

  • Size

    1.3MB

  • MD5

    f490a638c98ef373a65037be807bba02

  • SHA1

    59580c4e4106042072b0042a14c94d3dc45c0e69

  • SHA256

    29452d833ca8391084ef82951b44fff91a2511ee2708afc82352eddc711116a3

  • SHA512

    65799bb8a2d0eda3976db9e619b5b4a1d4d3f3b45b8a069273f0d3c8a57746e23e6390fd16da0fa00f2436e573adf6b653d702bd309cbeb03cafbca571cfe2b5

  • SSDEEP

    24576:I1CutlSMxLjTSmIaTbtYPHC4JuYmOiXDSVXT5X/fPxbyab:wFvSMxLXSmIaIoYLXT5Xf51b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\29452d833ca8391084ef82951b44fff91a2511ee2708afc82352eddc711116a3.exe
    "C:\Users\Admin\AppData\Local\Temp\29452d833ca8391084ef82951b44fff91a2511ee2708afc82352eddc711116a3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2188-0-0x000007FEF5DD3000-0x000007FEF5DD4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2188-1-0x0000000000150000-0x0000000000184000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2188-2-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-3-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-4-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-6-0x00000000003A0000-0x00000000003AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2188-5-0x00000000003A0000-0x00000000003AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2188-7-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-11-0x000007FEF5DD3000-0x000007FEF5DD4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2188-12-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-14-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-13-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-15-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-38-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-40-0x00000000003A0000-0x00000000003AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2188-39-0x00000000003A0000-0x00000000003AA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2188-41-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2188-42-0x000007FEF5DD0000-0x000007FEF67BC000-memory.dmp

    Filesize

    9.9MB

    Download