Overview

overview

10

Static

static

10

41697d52d5...30.exe

windows7-x64

1

41697d52d5...30.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-02-2025 07:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    41697d52d59d8c5ac9eb7008a170e429b198ca9d868b9fbd341f2bac6d4d0d30.exe

  • Size

    1.5MB

  • MD5

    0ccef44e0bf89705090b1788cd08bc45

  • SHA1

    9e398a463ccbd4d426979d8ad281458e9440863f

  • SHA256

    41697d52d59d8c5ac9eb7008a170e429b198ca9d868b9fbd341f2bac6d4d0d30

  • SHA512

    0c285afd7778c1893489c0a6cfeda0fa10f932b33765f0e6eb2f41e9df8be74a8be958a24abae63b3c548fda30c87bd3d09a7b375a0c1a3499d1410bda283d0b

  • SSDEEP

    24576:zQHQutpR8hL86h6IPwsWcZKf+gC6alHEbJ7Bx4CDSM5v:zY6Yo5WXf66alHEV774y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\41697d52d59d8c5ac9eb7008a170e429b198ca9d868b9fbd341f2bac6d4d0d30.exe
    "C:\Users\Admin\AppData\Local\Temp\41697d52d59d8c5ac9eb7008a170e429b198ca9d868b9fbd341f2bac6d4d0d30.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3040-0-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-1-0x0000000000140000-0x0000000000172000-memory.dmp

    Filesize

    200KB

    Download

  • memory/3040-2-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-3-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-4-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-5-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-8-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-10-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-11-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-12-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-13-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-29-0x000007FEF5633000-0x000007FEF5634000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-30-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-31-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-32-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-33-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-34-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-35-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-36-0x000007FEF5630000-0x000007FEF601C000-memory.dmp

    Filesize

    9.9MB

    Download