Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    02-02-2025 03:55

General

  • Target

    76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe

  • Size

    1.6MB

  • MD5

    13a8ddc94b397479cb02e28425cb0d9d

  • SHA1

    1a2385a5d96cd462e0c8ec3e62512a0c5a75e3da

  • SHA256

    76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719

  • SHA512

    5a5f9ceac7bbeaf84990f6eeeb745e02256afc3ca7c72fb87505576fa8c80845f2c005cda50ed363024012e0629d109e016d010f8b485e52c3ca89ab7e176df7

  • SSDEEP

    24576:r0yOdKnqj9MNrOoThmBZTsl3WaPECkDtGQjnEd7DSVXT5X1hnN:gSqj9MxOt83J/kwonPXT5X1hN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe
    "C:\Users\Admin\AppData\Local\Temp\76d3c2f3d25013605843810644f66cd8043a9134e294484ba3e1adc66e8b7719.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2448-0-0x000007FEF5713000-0x000007FEF5714000-memory.dmp

    Filesize

    4KB

  • memory/2448-1-0x00000000020C0000-0x00000000020F4000-memory.dmp

    Filesize

    208KB

  • memory/2448-2-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-3-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-4-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-5-0x0000000002100000-0x000000000210A000-memory.dmp

    Filesize

    40KB

  • memory/2448-6-0x0000000002100000-0x000000000210A000-memory.dmp

    Filesize

    40KB

  • memory/2448-7-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-11-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-31-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-35-0x000007FEF5713000-0x000007FEF5714000-memory.dmp

    Filesize

    4KB

  • memory/2448-36-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-37-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-38-0x0000000002100000-0x000000000210A000-memory.dmp

    Filesize

    40KB

  • memory/2448-39-0x0000000002100000-0x000000000210A000-memory.dmp

    Filesize

    40KB

  • memory/2448-40-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB

  • memory/2448-41-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

    Filesize

    9.9MB