Analysis
-
max time kernel
44s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/09/2022, 07:53
Static task
static1
Behavioral task
behavioral1
Sample
b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade.exe
Resource
win10v2004-20220812-en
General
-
Target
b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade.exe
-
Size
224KB
-
MD5
6be26f554f36a490ad2c82f843acad0c
-
SHA1
f9b8ea13f0e6d36f3b8dbd4d36000bf3a67275f3
-
SHA256
b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade
-
SHA512
00b958773b1e61b9b0fe542731a6de7ba686eef1435123e76b6ab09dd268dbaba4421afda390f18b929703e00aaba2b93386d1b3ef6f2a810f96dfd1f9dc4de1
-
SSDEEP
3072:HmmZ4fv5VX8kjPpwEjryJ1JyaS3orv19NMB/Z:HmmZ43r2EjiJyaS3Ct9GVZ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 740 b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 740 b9f649d1e687ffd6ef95ba94fec07152d94a114cc46722b640b8f96b35e2fade.exe