Analysis

  • max time kernel
    4265240s
  • max time network
    311s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    14-01-2022 16:03

General

  • Target

    SpyHunter-5.11-5-26253-Installer.exe

  • Size

    7.4MB

  • MD5

    911736872bcb9f85b9181c7d785ee032

  • SHA1

    806691ea5f3cf3cd335b00e436c51c9cb85bc9a4

  • SHA256

    46dda74095b229c3724b4ef7e5f4c05b0b0e15426ca76e9ac947475f21459d19

  • SHA512

    016c73a7e8ecad84ba73e220a37869bdf8465411a2085133112ba1215b92553c3ff7194e425b94b13b43f0152a0c1194376c87c5ffbd2441df0f3236d2b8fda6

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SpyHunter-5.11-5-26253-Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\SpyHunter-5.11-5-26253-Installer.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads