Overview

overview

10

Static

static

10

6628d8b045...34.exe

windows7-x64

1

6628d8b045...34.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    96s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    08-02-2025 06:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6628d8b045d00b75104c7172ef63431850fac722b120a517426c8b3adb51b734.exe

  • Size

    1.6MB

  • MD5

    1b0d842b28c0c2451ce650bae3ce0644

  • SHA1

    c0ac26f0dd199958e3b0904726dc083df1f473f4

  • SHA256

    6628d8b045d00b75104c7172ef63431850fac722b120a517426c8b3adb51b734

  • SHA512

    8709461f6254d9df99b0143e11f4bae101fd252e9971ab19e0bbe9261b3a02f5891474ae507e51dae27f8c117fb22ed55356c9eb2b025d405dd8f74056ef2dbe

  • SSDEEP

    24576:VeOCnoITBKtKUFIb99eESRh0ME23JMKOuTlqLoA6D6IVPx7JDSVXT5XOt4eSyap:Vmy0V2ZMKOY31PxKXT5Xug1p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6628d8b045d00b75104c7172ef63431850fac722b120a517426c8b3adb51b734.exe
    "C:\Users\Admin\AppData\Local\Temp\6628d8b045d00b75104c7172ef63431850fac722b120a517426c8b3adb51b734.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2384-0-0x000007FEF6003000-0x000007FEF6004000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2384-1-0x00000000004C0000-0x00000000004F4000-memory.dmp

    Filesize

    208KB

    Download

  • memory/2384-2-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-3-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-4-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-5-0x0000000000590000-0x000000000059A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2384-6-0x0000000000590000-0x000000000059A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2384-7-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-11-0x000007FEF6003000-0x000007FEF6004000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2384-12-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-13-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-14-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-34-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-35-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-36-0x0000000000590000-0x000000000059A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2384-37-0x0000000000590000-0x000000000059A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/2384-38-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2384-39-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

    Download