Analysis
-
max time kernel
52s -
max time network
178s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
10/09/2022, 14:09
Static task
static1
Behavioral task
behavioral1
Sample
WinRAR-ZIP-Archiv (neu).zip
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
Lovoo.exe
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
Neues Textdokument (2).txt
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
c.txt
Resource
win10-20220901-en
General
-
Target
Lovoo.exe
-
Size
2.4MB
-
MD5
e9183107f2c342e1f41349c99f598d94
-
SHA1
690b5cd64fc6deffa1921ca4db162d386cc88ecd
-
SHA256
ff7556835cced47dcdb82c5f48d87b50818aca36058108434e7a28a505e9437a
-
SHA512
d2c41ae310fcd758bb00123ac7c96375eb919f0de035b603bbd390ccbeba56c5538d80030a610cb4165133ef522f491d9219105805b0ad8a61516048214cbfea
-
SSDEEP
24576:0LNv/VBztIwHebk08m657w6ZBLmkitKqBCjC0PDgM5AG+VQ2VUNSHkEEar3qcXUk:0LNv/V5tIhTVV1BCjBEQAZ1Eoqv
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3040 Lovoo.exe