Analysis
- max time kernel
52s - max time network
178s - platform
windows10-1703_x64 - resource
win10-20220812-en - resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system - submitted
10/09/2022, 14:09
Static task
static1
Behavioral task
behavioral1
Sample
WinRAR-ZIP-Archiv (neu).zip
Resource
win10-20220812-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
Lovoo.exe
Resource
win10-20220812-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
Neues Textdokument (2).txt
Resource
win10-20220812-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
c.txt
Resource
win10-20220901-en
1 signatures
300 seconds
General
- Target Lovoo.exe
- Size 2.4MB
- Sample220910-rgcsesabh6
- SHA256 ff7556835cced47dcdb82c5f48d87b50818aca36058108434e7a28a505e9437a
- MD5 e9183107f2c342e1f41349c99f598d94
- SHA1 690b5cd64fc6deffa1921ca4db162d386cc88ecd
- SHA512 d2c41ae310fcd758bb00123ac7c96375eb919f0de035b603bbd390ccbeba56c5538d80030a610cb4165133ef522f491d9219105805b0ad8a61516048214cbfea
- SSDEEP 24576:0LNv/VBztIwHebk08m657w6ZBLmkitKqBCjC0PDgM5AG+VQ2VUNSHkEEar3qcXUk:0LNv/V5tIhTVV1BCjBEQAZ1Eoqv
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3040 Lovoo.exe