Resubmissions
05-09-2022 17:27
220905-v1mcrafch3 10Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-09-2022 17:27
Behavioral task
behavioral1
Sample
rvihbwsaua.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
rvihbwsaua10.scr
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
rvihbwsaua10.scr
-
Size
10.0MB
-
MD5
fb412d81275de589f7c14c36434b2c59
-
SHA1
0ae02af5b56f5b086574a2915503811f938ff8b5
-
SHA256
64ee8eabbe7f44ff6af9709dd83a9eea780a156fe423f456c87279a81b84b1f9
-
SHA512
6921abdaef5aee33ebece4e8f3aa80e11b0e6fa142e15b9e2333c1a074b43fa4e34fa14a59fb5e4e3d9aa30a2625ec0f0357b05b3f81c31c7a9685e1263a5881
-
SSDEEP
1536:dR5f9YVDuc6O55cGHiXmTrh9FQfUIECL/DCG05PfIp86Q:dR5f9YVDucoDXm/zFc5rDCdts
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
rvihbwsaua10.scrpid Process 2252 rvihbwsaua10.scr 2252 rvihbwsaua10.scr -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
rvihbwsaua10.scrdescription pid Process Token: SeDebugPrivilege 2252 rvihbwsaua10.scr