Analysis
-
max time kernel
172s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 10:41
General
-
Target
4ce01b0aad862304b9f2ed60b1d6662c66a24267ae8c3bad6a069070dc65e508.exe
-
Size
53KB
-
MD5
3724047902421f8cbd300e2159da83f5
-
SHA1
e9a384bdd1ea2a2e519e0df0ed13d68a426a6d30
-
SHA256
4ce01b0aad862304b9f2ed60b1d6662c66a24267ae8c3bad6a069070dc65e508
-
SHA512
0eabecf2e5e3150baeb353965b79e7758878556fd1895e7e02771443d63fea9bad3b0b0002b563796613c80face6fa7d8442ff3649253e256c340c89785c175b
-
SSDEEP
768:SrpexrKZCkP2uX/1UXJEZ3Fj6gfd1fWaikXPis/agtKpLDNObYY4Y9le:ShZCy2e/1U+Z1j/lf/4pcbYY4ic
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ce01b0aad862304b9f2ed60b1d6662c66a24267ae8c3bad6a069070dc65e508.exe"C:\Users\Admin\AppData\Local\Temp\4ce01b0aad862304b9f2ed60b1d6662c66a24267ae8c3bad6a069070dc65e508.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken