4c686d554c2e323030f0ac7d9dc7cf179ae59273ab5edc35d837e1afa7e5db7a | Triage

Resubmissions

28/03/2025, 22:46

250328-2p9r8svlw2 3

27/03/2025, 19:17

250327-xzhpaaw1av 10

Analysis

max time kernel
10s
max time network
5s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20250314-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20250314-enlocale:en-usos:windows10-ltsc_2021-x64system
submitted
28/03/2025, 22:46

Sharing

Report Analysis Logs

General

Target

apkeasytool.exe
Size

1.9MB
MD5

ecd05b7c5af91af8b7264d5dbdea1d68
SHA1

58a9b57885ca2935026723df9c23a84dcbef4936
SHA256

4c686d554c2e323030f0ac7d9dc7cf179ae59273ab5edc35d837e1afa7e5db7a
SHA512

603cd417e50b2c4f24a4fc4647d0d40d43ad5041928cc8093f4c1dd9e7b973d73c84de5fe51ef3c31e80c4c1e4cea57214b0cbe6f1306a1690015b94f6d2fedc
SSDEEP

24576:LKySd3yqpKeJjeD8nV4YNgBv689CIcLfz3ZP9F8nVWTyFoBkkAu:NSd34Y4fcpP8nVFan

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5024	apkeasytool.exe

C:\Users\Admin\AppData\Local\Temp\apkeasytool.exe
"C:\Users\Admin\AppData\Local\Temp\apkeasytool.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5024-0-0x00007FFA84703000-0x00007FFA84705000-memory.dmp

Filesize
8KB

Download
memory/5024-1-0x000001AB4FED0000-0x000001AB500BC000-memory.dmp

Filesize
1.9MB

Download
memory/5024-2-0x00007FFA84700000-0x00007FFA851C2000-memory.dmp

Filesize
10.8MB

Download
memory/5024-4-0x00007FFA84700000-0x00007FFA851C2000-memory.dmp

Filesize
10.8MB

Download