Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
07/11/2022, 19:44
Static task
static1
Behavioral task
behavioral1
Sample
9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe
Resource
win10v2004-20220812-en
General
-
Target
9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe
-
Size
1.3MB
-
MD5
0d7f032c8e5e64db33c335263a7802f3
-
SHA1
e0420fd6edf3a726fc8e229722588ffb20069cc2
-
SHA256
9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474
-
SHA512
f9c1399a5f919eeba7efca641a4ad671a5602088c7af1d10a4957880657349a46dc298d28d6ec2d6cc2108dbb54fdb7ab7210e47bc100680bf993c2be069404f
-
SSDEEP
12288:s8eDyJYuX0zczdQz3cBCJv7x6QrQUKpzy55fYOvgUQPN0vlYYWVBMYiU8eDyJYuG:smX1IZJTxKMNPSmX1IZJTxKMNP
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1956 9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1956 9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe"C:\Users\Admin\AppData\Local\Temp\9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1956