4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-02-2025 12:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
Size

1.3MB
MD5

cc590f73f452298a5c01b0165e0d8383
SHA1

7501f6f678eba1983a11e90f8282d633978ec5a9
SHA256

4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e
SHA512

dcef7034b12ffd37332daa9c3dff6a4a879f443f21cdea9ceb2f813c3b31e31fbacfd08d0d41f3f93019be80df47a3997ffb3a9a24328631cee0904ebbd89320
SSDEEP

24576:r2qLfk7bTs2/PwjKYR8ASIBwhWODDSIQXbJ73:KpbTv/Yr8xo6QXV73

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe

C:\Users\Admin\AppData\Local\Temp\4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
"C:\Users\Admin\AppData\Local\Temp\4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x000007FEF55B3000-0x000007FEF55B4000-memory.dmp

Filesize
4KB

Download
memory/2020-1-0x0000000000450000-0x000000000048E000-memory.dmp

Filesize
248KB

Download
memory/2020-2-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-3-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-4-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-7-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-9-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-10-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-11-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-34-0x000007FEF55B3000-0x000007FEF55B4000-memory.dmp

Filesize
4KB

Download
memory/2020-35-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-36-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-37-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-38-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-39-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download
memory/2020-40-0x000007FEF55B0000-0x000007FEF5F9C000-memory.dmp

Filesize
9.9MB

Download