Analysis
-
max time kernel
144s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
21-10-2022 01:17
Static task
static1
Behavioral task
behavioral1
Sample
6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe
Resource
win10v2004-20220901-en
General
-
Target
6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe
-
Size
541KB
-
MD5
510493a47aadf11d27f3ea593994c950
-
SHA1
0639b0a4f9d5119ea3a7749ce06851592753b707
-
SHA256
6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e
-
SHA512
7a821a69eb8a2d98abdbee9b6b9a504e925a0c2e196012c6ef4de9c60e102d56f0f9c9b6dfe70aad7cb4d8cd8c7e4c5919d762d1487672ae0d9aa555083d92f5
-
SSDEEP
6144:fg634LnX+eheFht+8Vnyk6tAI5xJ4Oe1akah8lcQxa0N8C/L:o63WnLuhY8gAMxvfglcB0J
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 876 6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 876 6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe 876 6d6385cfc5b148a46106d8b9e61391d145cdfeb4d90f2332fe896533586c486e.exe