Overview

overview

10

Static

static

10

319f926dc3...d4.exe

windows7-x64

1

319f926dc3...d4.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    04-02-2025 16:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    319f926dc3fbe7a9ee93abe82e75d5864bccc9b216fe79c2745058d2884bd5d4.exe

  • Size

    1.9MB

  • MD5

    c443e409cc75c33361aa5ca8c9d11237

  • SHA1

    6e481f890bd6426942175964154432a7d366637d

  • SHA256

    319f926dc3fbe7a9ee93abe82e75d5864bccc9b216fe79c2745058d2884bd5d4

  • SHA512

    55de826859d528529c2c2b9a61858b3ad1d5e2d4927f9c9f3b0615222049b30419eca426fdebd5f47d48a7698e30cd69b879640ae67962236546fc076fd55b5b

  • SSDEEP

    49152:Wgil3OghBQ0xbWXqjvd/+wNg9cMpbigrXT5Xeza1w4m:lQ2qjDg9cMNigrD5/17m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\319f926dc3fbe7a9ee93abe82e75d5864bccc9b216fe79c2745058d2884bd5d4.exe
    "C:\Users\Admin\AppData\Local\Temp\319f926dc3fbe7a9ee93abe82e75d5864bccc9b216fe79c2745058d2884bd5d4.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\CabC110.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • memory/2076-11-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-1-0x00000000004C0000-0x00000000004F4000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2076-3-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-4-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-6-0x0000000001D40000-0x0000000001D4A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2076-7-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-2-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-0-0x000007FEF5A03000-0x000007FEF5A04000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2076-5-0x0000000001D40000-0x0000000001D4A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2076-38-0x000007FEF5A03000-0x000007FEF5A04000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2076-39-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-43-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-44-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-45-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2076-46-0x000007FEF5A00000-0x000007FEF63EC000-memory.dmp

    Filesize

    9.9MB

    Download