Overview

overview

10

Static

static

10

54c6b5a5c4...2a.exe

windows7-x64

1

54c6b5a5c4...2a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2025 05:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    54c6b5a5c440aad21dc17c5acf36a7401ca7ff569e496f11fa8d04f8e2f9102a.exe

  • Size

    1.1MB

  • MD5

    5f76ab863e2842a242de19fec465d1d0

  • SHA1

    c1add9f894e4edb2ab61ce55831b418d9480c00a

  • SHA256

    54c6b5a5c440aad21dc17c5acf36a7401ca7ff569e496f11fa8d04f8e2f9102a

  • SHA512

    fafa14cd73fb2b9b716256d09b1910f7a8793b044ba519c76caa0c17cda85816cb75c4c87527808f71f742651819e51f345932780d540f05951e9204fa1d85c7

  • SSDEEP

    24576:8APZ+oDqF/7VGQeRCvC160aeFFOQbJ7XDSWc:hXDazVGQ7KFFpV77c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54c6b5a5c440aad21dc17c5acf36a7401ca7ff569e496f11fa8d04f8e2f9102a.exe
    "C:\Users\Admin\AppData\Local\Temp\54c6b5a5c440aad21dc17c5acf36a7401ca7ff569e496f11fa8d04f8e2f9102a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2432-0-0x000007FEF5883000-0x000007FEF5884000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2432-1-0x00000000002E0000-0x0000000000312000-memory.dmp

    Filesize

    200KB

    Download

  • memory/2432-2-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-3-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-4-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-5-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-8-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-10-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-11-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-12-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-29-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-28-0x000007FEF5883000-0x000007FEF5884000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2432-30-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-31-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-32-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-33-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-34-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2432-35-0x000007FEF5880000-0x000007FEF626C000-memory.dmp

    Filesize

    9.9MB

    Download