Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows10_x64 -
resource
win10-en-20211104 -
submitted
06-12-2021 14:51
Static task
static1
Behavioral task
behavioral1
Sample
Facebook Ads Checker Tool.exe
Resource
win7-en-20211014
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Facebook Ads Checker Tool.exe
Resource
win10-en-20211104
windows10_x64
0 signatures
0 seconds
General
-
Target
Facebook Ads Checker Tool.exe
-
Size
1.4MB
-
MD5
d057d7dd9b8c94c1b6b6fe2b1a4ae5a9
-
SHA1
0416166bc9603cfbaf822d4ddeb8ff477053a84b
-
SHA256
ae2ad42deb8098ffda7b7b2b7a1dcc881cff6cee2b4da7ef5724de1d2fadf067
-
SHA512
48941e2236ef447109eafb0dd0cd3128985cae78fd42af2af26ec3c755e82bb0b615606e8ba0d932effdd37c08c1db48956a18015682c516154a422631e445c3
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
Processes:
Facebook Ads Checker Tool.exepid process 2380 Facebook Ads Checker Tool.exe 2380 Facebook Ads Checker Tool.exe 2380 Facebook Ads Checker Tool.exe 2380 Facebook Ads Checker Tool.exe 2380 Facebook Ads Checker Tool.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Facebook Ads Checker Tool.exedescription pid process Token: SeShutdownPrivilege 2380 Facebook Ads Checker Tool.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Facebook Ads Checker Tool.exepid process 2380 Facebook Ads Checker Tool.exe 2380 Facebook Ads Checker Tool.exe