Analysis

  • max time kernel
    153s
  • max time network
    110s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    09-02-2025 07:49

General

  • Target

    8b8f72c1458c786a26776222d1bff4c8973e0770c20eaaa6ce579f2a44a97110.exe

  • Size

    1.1MB

  • MD5

    2cc637cef44f300f4cd0f9e82c31de97

  • SHA1

    a8687786041bd0dbc25c6d1e540ce27be03e4341

  • SHA256

    8b8f72c1458c786a26776222d1bff4c8973e0770c20eaaa6ce579f2a44a97110

  • SHA512

    4d3b63e582a27d346736840322ca33ba8ccbbb478ebba051120ffed98bf19e81de17e30abb637b9e6b9df523e3aa01999079cb0f967fefbf0ab99410b1f993d5

  • SSDEEP

    24576:zuxkXWtPcZztujn7z3LG5KuRgPKvbJ7QDS9+uos:ekXWNcRtuz7GI3yvV79R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8b8f72c1458c786a26776222d1bff4c8973e0770c20eaaa6ce579f2a44a97110.exe
    "C:\Users\Admin\AppData\Local\Temp\8b8f72c1458c786a26776222d1bff4c8973e0770c20eaaa6ce579f2a44a97110.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/760-0-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

  • memory/760-1-0x0000000000240000-0x0000000000272000-memory.dmp

    Filesize

    200KB

  • memory/760-2-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-3-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-4-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-7-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-9-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-10-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-11-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-12-0x000007FEF5A63000-0x000007FEF5A64000-memory.dmp

    Filesize

    4KB

  • memory/760-13-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-29-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-30-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-31-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB

  • memory/760-32-0x000007FEF5A60000-0x000007FEF644C000-memory.dmp

    Filesize

    9.9MB