Analysis
- max time kernel
148s - max time network
154s - platform
windows10_x64 - resource
win10v20210410 - submitted
18/07/2021, 13:11
Static task
static1
Behavioral task
behavioral1
Sample
4D2A92DC096D746F1E840C06745BE063.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4D2A92DC096D746F1E840C06745BE063.exe
Resource
win10v20210410
0 signatures
0 seconds
General
- Target 4D2A92DC096D746F1E840C06745BE063.exe
- Size 1.4MB
- Sample210718-7df2ne756s
- SHA256 b202f74ecf1a8d423c2187df2d33fc765727a46b186b408394b8eccc31554203
- MD5 4d2a92dc096d746f1e840c06745be063
- SHA1 881ef76170e6fe0b0c662b7c3b45ff06526c0223
- SHA512 4cb89ec0b28a87dfba0045d52fdbfb9eeea4302589f0ede7c725d39b92adc04fe9209b4160f2b73babee3215d9cb5a8c264797b1a3b11d9a6707b58df70d120a
- MD5 SHA1 SHA512
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs
pid Process 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 4064 4D2A92DC096D746F1E840C06745BE063.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4064 4D2A92DC096D746F1E840C06745BE063.exe 4064 4D2A92DC096D746F1E840C06745BE063.exe