Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
08/09/2022, 23:01 UTC
Static task
static1
Behavioral task
behavioral1
Sample
6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe
Resource
win7-20220812-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe
Resource
win10-20220812-en
2 signatures
300 seconds
General
-
Target
6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe
-
Size
4.1MB
-
MD5
1f33839521129500850386daa03dae57
-
SHA1
be026c0a891a8a55c7d543761a59f01d4bc0030c
-
SHA256
6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d
-
SHA512
31cedaace6fca2669236dfa386623a8c4d17acd963307f4e5ee43c766a0232bc03e95aefebd2b2218e711f563ed3240a99628c644c23060b4e11023cb47d5a61
-
SSDEEP
98304:s55jIfDneF0f/Gl/84lTW589Nlh8yqYV:s5lgdOe3+NX9
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1336 6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe 1336 6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1336 6fe8bee3e7fa6ea7ffb8c8760ca52d4c451b719e827975569f06cbb35cf0567d.exe