Overview

overview

10

Static

static

10

b7f6747561...c3.exe

windows7-x64

1

b7f6747561...c3.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    04-02-2025 21:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b7f67475611f0c9c87871ceb7e17cf195433b201282b109a0ab11b545fd031c3.exe

  • Size

    1.3MB

  • MD5

    229c83d814e127e932c9af5cefa18431

  • SHA1

    19a41a5e9bf105a9afe37adf5fab05318b2d79ff

  • SHA256

    b7f67475611f0c9c87871ceb7e17cf195433b201282b109a0ab11b545fd031c3

  • SHA512

    ed85a2ed1bd187de185c9056a1cfb6bb64fe1aa391f629f6f67f86f5bcf90d6730f8315bfb3e995d6e5ff245e8b0940b770e89febbe02f78e1b8d9b3e85dcf61

  • SSDEEP

    24576:UnXrUf+HEwwO6/DKFe52RUBX0OwcDSVXT5X4digf3kyaJ:KXra+8O6/DGeo9RXT5X4dr3k1J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b7f67475611f0c9c87871ceb7e17cf195433b201282b109a0ab11b545fd031c3.exe
    "C:\Users\Admin\AppData\Local\Temp\b7f67475611f0c9c87871ceb7e17cf195433b201282b109a0ab11b545fd031c3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\CabD884.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • memory/2360-10-0x000007FEF5EB0000-0x000007FEF689C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-6-0x000007FEF5EB0000-0x000007FEF689C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-7-0x000007FEF5EB0000-0x000007FEF689C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-9-0x0000000001D20000-0x0000000001D2A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-8-0x0000000001D20000-0x0000000001D2A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-0-0x000007FEF5EB3000-0x000007FEF5EB4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2360-3-0x0000000001E40000-0x0000000001E74000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2360-43-0x000007FEF5EB3000-0x000007FEF5EB4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2360-44-0x000007FEF5EB0000-0x000007FEF689C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2360-46-0x0000000001D20000-0x0000000001D2A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-45-0x0000000001D20000-0x0000000001D2A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2360-47-0x000007FEF5EB0000-0x000007FEF689C000-memory.dmp

    Filesize

    9.9MB

    Download