Overview

overview

10

Static

static

10

5d5e289779...d5.exe

windows7-x64

1

5d5e289779...d5.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    10-02-2025 09:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5d5e289779d1f3da2f69e5685d919e31ca03f0758e5bff82491b08b0ca16c7d5.exe

  • Size

    1.5MB

  • MD5

    c789d8002fe34881c6fffee7782de7db

  • SHA1

    87b1ae7b8e1d74adf8f64c0d4d51610adc1cc326

  • SHA256

    5d5e289779d1f3da2f69e5685d919e31ca03f0758e5bff82491b08b0ca16c7d5

  • SHA512

    b3a80bf3da481785c40e74699a6065cb88e0a9b08ba4c2db67a8ed25a6f739a6a3dcf747c6f4efab8539a2766b856e0a7a315a561eaa15806eb6a1e56cb612eb

  • SSDEEP

    24576:zQHQutpR8hL86h6IPwsWcZKf+gC6alHEbJ7Bx4CDSM5u:zY6Yo5WXf66alHEV7747

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d5e289779d1f3da2f69e5685d919e31ca03f0758e5bff82491b08b0ca16c7d5.exe
    "C:\Users\Admin\AppData\Local\Temp\5d5e289779d1f3da2f69e5685d919e31ca03f0758e5bff82491b08b0ca16c7d5.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3040-0-0x000007FEF5733000-0x000007FEF5734000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-1-0x0000000000250000-0x0000000000282000-memory.dmp

    Filesize

    200KB

    Download

  • memory/3040-2-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-3-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-4-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-5-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-8-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-10-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-12-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-11-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-13-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-14-0x000007FEF5733000-0x000007FEF5734000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3040-15-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-29-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-30-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-31-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-32-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-33-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/3040-34-0x000007FEF5730000-0x000007FEF611C000-memory.dmp

    Filesize

    9.9MB

    Download