Analysis
-
max time kernel
131s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19/09/2022, 04:12
General
-
Target
19f0069384eb6dd87021fec263c1db4f5f198ab3adaa7899defe6ea6656ef9d5.exe
-
Size
91KB
-
MD5
fec65da0076f2ce04b58b58d9c2db015
-
SHA1
e4a5612ff0195a513e996beb7f9a193202067761
-
SHA256
19f0069384eb6dd87021fec263c1db4f5f198ab3adaa7899defe6ea6656ef9d5
-
SHA512
9bc1e6375fd1358f27ff8138eb045f0e8aa97332fa5e0d23a3b647575dbf6f3c14e8235feac8199f4c609a08824706d61d2db51f5dfb1c86256f7394acfa740e
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFbUIu:NwtRonyypexoiNtxYGYIu
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19f0069384eb6dd87021fec263c1db4f5f198ab3adaa7899defe6ea6656ef9d5.exe"C:\Users\Admin\AppData\Local\Temp\19f0069384eb6dd87021fec263c1db4f5f198ab3adaa7899defe6ea6656ef9d5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken