Analysis
-
max time kernel
31s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
06-09-2022 08:28
General
-
Target
rust2.exe
-
Size
4.2MB
-
MD5
21028a03e2284bfb84f54625fa2ce1a8
-
SHA1
d1db4d6b26e0494895a48dcc9710bef9dd47833b
-
SHA256
cb93b81cecd1f21ab966b7d6e8a888b4bf8f215911735fe25bd227fcb3f75577
-
SHA512
aecec4c6da063bc92daa5d61fc799dc75c221ba3f934537da4ca84db65db6aa18f8f782c0cd59bbfac03b0aa163d3df2b76ee822cc49b9211f6512f5dd2d3cdb
-
SSDEEP
49152:/Z1iGrIoQBLcS6rpe83bMMoEUWdeWoY6DINDcodCbZ2XLF+iHrCwZqdww9IEsbH5:hsMRtH3Jd14nAp
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\rust2.exe"C:\Users\Admin\AppData\Local\Temp\rust2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken