Analysis
-
max time kernel
45s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
27/11/2022, 11:32
Behavioral task
behavioral1
Sample
看海弹窗广告杀手/看海升级.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
看海弹窗广告杀手/看海升级.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
看海弹窗广告杀手/看海弹窗广告杀手.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
看海弹窗广告杀手/看海弹窗广告杀手.exe
Resource
win10v2004-20221111-en
General
-
Target
看海弹窗广告杀手/看海弹窗广告杀手.exe
-
Size
1.0MB
-
MD5
75cdaaaaee2465ff2758698fe9a21b10
-
SHA1
053dae73c34bfb1715360de8385819e5cda4b21e
-
SHA256
29e483907c0e645bee93fe09722ae8a829d0461c08da65cc33f6dccaaf8eba4a
-
SHA512
559a7f2bc6b2307d380f3b2097dd1670ae456071a6347dee3cf479ee33393261a870dffb5943050657050c6f911fddd61b52e163d34661e27dc3a324b7dc4013
-
SSDEEP
24576:jefCe/I0eviUv9nLS0mYXuiFwetG8DhAeOjAuvKP:j1e/IpZLSEXu6weogKeOjAuy
Malware Config
Signatures
-
resource yara_rule behavioral3/memory/1804-63-0x0000000000400000-0x00000000006BB000-memory.dmp upx behavioral3/memory/1804-64-0x0000000000400000-0x00000000006BB000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1804 看海弹窗广告杀手.exe