Analysis
-
max time kernel
19s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 18:58
Static task
static1
Behavioral task
behavioral1
Sample
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe
Resource
win10v2004-20221111-en
General
-
Target
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe
-
Size
2.2MB
-
MD5
5feafcc027a2afd8ce3488ea1d53931a
-
SHA1
c8ec22b4514991e31fb4d58b9d6aab2e748b2556
-
SHA256
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7
-
SHA512
62bf0fa5d7a40fb2efb3fc8b9ddb889d48d13bc661d97c5867194d81863840adbbdd2eae290efa0eff7440f72703e5a4f44bb62b43c7fee1a63374da70e5a70c
-
SSDEEP
24576:V9eun/GJngLCyHjMha6C2ZnkEC98A98CG:V91n/GJngLtMoH2n/P
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exedescription pid process Token: SeDebugPrivilege 1792 5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exepid process 1792 5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe 1792 5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe"C:\Users\Admin\AppData\Local\Temp\5a72bc0c510e265d15d8f2923adf98f199904e5d89d9d5715a57082d83edaea7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1792