Overview

overview

10

Static

static

3

630efa1e2d...ad.exe

windows7-x64

10

630efa1e2d...ad.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    124s
  • max time network
    107s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-06-2024 05:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    630efa1e2dc642799b867363bb36d1953884480ac29942a1ab20243a8a9620ad.exe

  • Size

    278KB

  • MD5

    66a3124fe4ed45fae20e2bd4ee33c626

  • SHA1

    fc5ef4caf4d8a51a340f6fd98ac525debcff8f30

  • SHA256

    630efa1e2dc642799b867363bb36d1953884480ac29942a1ab20243a8a9620ad

  • SHA512

    569bc064f465c32fd11fdd67896106778f13094e20adc739d8824f9e02508701b712bd3cfdab48782421b35acebe16bb5b0e97543db869ecaec5c1b87902b872

  • SSDEEP

    6144:sU0sd0bzy1GOgofaePZ3e5fv+vc6X+olz:XzHGOgovPwcXbl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\630efa1e2dc642799b867363bb36d1953884480ac29942a1ab20243a8a9620ad.exe
    "C:\Users\Admin\AppData\Local\Temp\630efa1e2dc642799b867363bb36d1953884480ac29942a1ab20243a8a9620ad.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2072-0-0x0000000074E5E000-0x0000000074E5F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2072-1-0x0000000000BE0000-0x0000000000C2C000-memory.dmp
    Filesize

    304KB

    Download
  • memory/2072-2-0x0000000005C90000-0x0000000006234000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/2072-3-0x0000000005630000-0x00000000056C2000-memory.dmp
    Filesize

    584KB

    Download
  • memory/2072-4-0x00000000056E0000-0x000000000571E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2072-5-0x00000000057E0000-0x000000000587C000-memory.dmp
    Filesize

    624KB

    Download
  • memory/2072-6-0x00000000057B0000-0x00000000057C8000-memory.dmp
    Filesize

    96KB

    Download
  • memory/2072-7-0x0000000074E50000-0x0000000075600000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/2072-8-0x0000000005C40000-0x0000000005C46000-memory.dmp
    Filesize

    24KB

    Download
  • memory/2072-9-0x00000000062B0000-0x0000000006316000-memory.dmp
    Filesize

    408KB

    Download
  • memory/2072-10-0x0000000074E5E000-0x0000000074E5F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2072-11-0x0000000074E50000-0x0000000075600000-memory.dmp
    Filesize

    7.7MB

    Download