Analysis
-
max time kernel
232s -
max time network
334s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 09:39
Static task
static1
Behavioral task
behavioral1
Sample
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe
Resource
win10v2004-20220901-en
General
-
Target
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe
-
Size
456KB
-
MD5
5182a0b29126eccd516f353b275c08ec
-
SHA1
a451669e5d3e08d7e4ec15a6cc76d04410a20584
-
SHA256
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9
-
SHA512
247b4f7d5d4c1fa795923b9433a490b00b3f60d1e0ed7343a2bfe71e3d614bb8181a347d1d2c3958e96dfb43a395b5426006cb1b8d3f04d180a7c0041c78ecf2
-
SSDEEP
6144:7CM7DU18kUB05KTp99N3DSaVbqE5MoR1ZAQpaLVr0tZzPEaN+pFpRaa30U:j7D5B05qVIEb9551ZApxQr+Fp4M
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exepid process 876 e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exedescription pid process Token: SeDebugPrivilege 876 e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe"C:\Users\Admin\AppData\Local\Temp\e80109fc95db0d214dbb17702f69a84c81c30832e35857fbe4b64ba7878a80c9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:876