Analysis
-
max time kernel
92s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 11:06
Static task
static1
Behavioral task
behavioral1
Sample
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe
Resource
win10v2004-20220812-en
General
-
Target
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe
-
Size
9KB
-
MD5
06edbdeefdc0f075d20aab0e986fa0a7
-
SHA1
765fc4faf7c25e4320915e8fd49dc6433186fb8d
-
SHA256
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af
-
SHA512
1631a42d7f0978d9a1033ae1803dada3b82cab9f8efb83e0a16c493e27e5cc6d2d36717aa8e47429eeebae51f6cafdfd8c375026fcebcf2c68a81ccff1597f09
-
SSDEEP
96:ooGmH+AWq3r5Psv44Ve+kIa3cpcLdl1cmou9YKBECC8LSLq3LdLl4rNgSD2i:x5mM+kIajZlWmRYKuVo2qbRl4rr
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exedescription pid process Token: SeDebugPrivilege 4748 90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exepid process 4748 90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe 4748 90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe"C:\Users\Admin\AppData\Local\Temp\90dfc0e04863206f8652832541965af627b85f9b9a13049c6df939f33693f0af.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4748