Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
15-10-2022 14:27
Static task
static1
Behavioral task
behavioral1
Sample
AIF 500 unit Distribution 2018ECA - ProfoInve.exe
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AIF 500 unit Distribution 2018ECA - ProfoInve.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
13 signatures
150 seconds
General
-
Target
AIF 500 unit Distribution 2018ECA - ProfoInve.exe
-
Size
986KB
-
MD5
f72d0995ccf16a2481cb2966e3e05f19
-
SHA1
7b40fd28569cd4517c3a6bb91ce11a7e26cde71c
-
SHA256
c046fc938166fd34c8041ff7c93f98f0ac3f68486aa844178e720c14dbbde625
-
SHA512
cb3243354cd56725a498ec5b60b6737bc15c72ff4b8e24dae378d98636abc9c00b14ebffee1cbf079580d8b16df467e701ea6571089f10830b0833f163017c90
-
SSDEEP
12288:DR7Vgp6llBxZ/sAu0ximzRLQgR//Y0ceWaJKv6gQuF:DR79lP5HRLQgR/g0ceLcCgQg
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
AIF 500 unit Distribution 2018ECA - ProfoInve.exedescription pid process Token: SeDebugPrivilege 1836 AIF 500 unit Distribution 2018ECA - ProfoInve.exe