Overview

overview

10

Static

static

10

c39e5e5773...fb.exe

windows7-x64

7

c39e5e5773...fb.exe

windows10-2004-x64

7

c3a61d282c...2f.exe

windows7-x64

7

c3a61d282c...2f.exe

windows10-2004-x64

7

c3aaa8d067...d1.exe

windows7-x64

10

c3aaa8d067...d1.exe

windows10-2004-x64

10

c40612db16...6d.exe

windows7-x64

10

c40612db16...6d.exe

windows10-2004-x64

10

c45000d072...99.exe

windows7-x64

10

c45000d072...99.exe

windows10-2004-x64

10

c4639b8ab9...97.exe

windows7-x64

10

c4639b8ab9...97.exe

windows10-2004-x64

10

c47cd91636...6d.exe

windows7-x64

1

c47cd91636...6d.exe

windows10-2004-x64

1

c486ed6acb...df.exe

windows7-x64

7

c486ed6acb...df.exe

windows10-2004-x64

7

c4b4c8152f...dc.exe

windows7-x64

10

c4b4c8152f...dc.exe

windows10-2004-x64

10

c4c197e502...e0.exe

windows7-x64

10

c4c197e502...e0.exe

windows10-2004-x64

10

c4ca622404...18.exe

windows7-x64

10

c4ca622404...18.exe

windows10-2004-x64

10

c50b533887...50.exe

windows7-x64

10

c50b533887...50.exe

windows10-2004-x64

10

c50b94cf52...6f.exe

windows7-x64

10

c50b94cf52...6f.exe

windows10-2004-x64

10

c520bfebf2...a2.exe

windows7-x64

8

c520bfebf2...a2.exe

windows10-2004-x64

10

c53059381a...48.exe

windows7-x64

10

c53059381a...48.exe

windows10-2004-x64

10

c59549cfc2...b8.exe

windows7-x64

1

c59549cfc2...b8.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    56s
  • max time network
    67s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/03/2025, 19:52 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c47cd916369fb96f0624e8c8a549946d.exe

  • Size

    16KB

  • MD5

    c47cd916369fb96f0624e8c8a549946d

  • SHA1

    f7a18e9e87292c32dd956a23c223c1b19fd4aeb7

  • SHA256

    9ae1914f28457c593679089eb29415f8a80ab46730a1e4e5f9dfdbe7d22860b9

  • SHA512

    51df1ea3d544561789629901626ac1a2843181572f941dc827f29409bc113e483e42784e1acce45329f63423367f392cfb33d348953008119673a8482f541a2a

  • SSDEEP

    384:6/5gk7lVzF3stf9oDPlMNcLlb5sVKhye5Ct:6/5gk7lVZUclMNEdo

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c47cd916369fb96f0624e8c8a549946d.exe
    "C:\Users\Admin\AppData\Local\Temp\c47cd916369fb96f0624e8c8a549946d.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5896

Network

  • flag-us
    DNS
    tse1.mm.bing.net
    Remote address:
    8.8.8.8:53
    Request
    tse1.mm.bing.net
    IN A
    Response
    tse1.mm.bing.net
    IN CNAME
    mm-mm.bing.net.trafficmanager.net
    mm-mm.bing.net.trafficmanager.net
    IN CNAME
    ax-0001.ax-msedge.net
    ax-0001.ax-msedge.net
    IN A
    150.171.28.10
    ax-0001.ax-msedge.net
    IN A
    150.171.27.10
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239339388237_16CFOYO7VUY1K6DRH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    150.171.28.10:443
    Request
    GET /th?id=OADD2.10239339388237_16CFOYO7VUY1K6DRH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 443021
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 9D6DB3B26AAA4511911F6B91D9511689 Ref B: LON04EDGE1011 Ref C: 2025-03-22T19:54:24Z
    date: Sat, 22 Mar 2025 19:54:24 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239360264291_1OMXAE3VFGJI9A76K&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    150.171.28.10:443
    Request
    GET /th?id=OADD2.10239360264291_1OMXAE3VFGJI9A76K&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239360433144_1RLNQD8OFQA9LQ1KZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    150.171.28.10:443
    Request
    GET /th?id=OADD2.10239360433144_1RLNQD8OFQA9LQ1KZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239339388236_1HL4SRJ7X21NUOQZ9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    150.171.28.10:443
    Request
    GET /th?id=OADD2.10239339388236_1HL4SRJ7X21NUOQZ9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239360433145_1P8I9JAN4TGEHJX5M&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    150.171.28.10:443
    Request
    GET /th?id=OADD2.10239360433145_1P8I9JAN4TGEHJX5M&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 150.171.28.10:443
    tse1.mm.bing.net
    tls, http2
    1.7kB
     8.1kB
     19
    16
  • 150.171.28.10:443
    tse1.mm.bing.net
    tls, http2
    1.7kB
     8.1kB
     19
    16
  • 150.171.28.10:443
    tse1.mm.bing.net
    tls, http2
    1.7kB
     8.1kB
     19
    16
  • 150.171.28.10:443
    https://tse1.mm.bing.net/th?id=OADD2.10239360433145_1P8I9JAN4TGEHJX5M&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    tls, http2
    4.6kB
     64.4kB
     64
    60

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239339388237_16CFOYO7VUY1K6DRH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239360264291_1OMXAE3VFGJI9A76K&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239360433144_1RLNQD8OFQA9LQ1KZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239339388236_1HL4SRJ7X21NUOQZ9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239360433145_1P8I9JAN4TGEHJX5M&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Response

    200
  • 150.171.28.10:443
    tse1.mm.bing.net
    tls, http2
    1.7kB
     8.1kB
     19
    16
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 127.0.0.1:333
    c47cd916369fb96f0624e8c8a549946d.exe
  • 8.8.8.8:53
    tse1.mm.bing.net
    dns
    62 B
     170 B
     1
    1

    DNS Request

    tse1.mm.bing.net

    DNS Response

    150.171.28.10
    150.171.27.10

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5896-0-0x00007FFD4B235000-0x00007FFD4B236000-memory.dmp

    Filesize

    4KB

    Download

  • memory/5896-2-0x000000001BD40000-0x000000001C20E000-memory.dmp

    Filesize

    4.8MB

    Download

  • memory/5896-1-0x00007FFD4AF80000-0x00007FFD4B921000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/5896-3-0x000000001B7A0000-0x000000001B846000-memory.dmp

    Filesize

    664KB

    Download

  • memory/5896-4-0x00007FFD4AF80000-0x00007FFD4B921000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/5896-5-0x000000001C320000-0x000000001C382000-memory.dmp

    Filesize

    392KB

    Download

  • memory/5896-6-0x00007FFD4B235000-0x00007FFD4B236000-memory.dmp

    Filesize

    4KB

    Download

  • memory/5896-7-0x00007FFD4AF80000-0x00007FFD4B921000-memory.dmp

    Filesize

    9.6MB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.