Analysis
-
max time kernel
211s -
max time network
238s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
02/12/2022, 21:31
General
-
Target
be11ec7808bb53d7cfc074e13606879195dfb90904a83ae1e813fbf1f2339924.exe
-
Size
91KB
-
MD5
d0754ec2342fb90c027eb75e90462716
-
SHA1
3ad2c6a3adfd5de4b7b007d25d0d5ec0e91fc137
-
SHA256
be11ec7808bb53d7cfc074e13606879195dfb90904a83ae1e813fbf1f2339924
-
SHA512
43004cf18c4ed789745070b587549ee22380d9ad427b05b1965a6979bfc4189b792622bda5f18357e43cad56d44ab4b551176757172b668f5eb87e6f3eb60d00
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF6o8:NwtRonyypexoiNtxYGK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\be11ec7808bb53d7cfc074e13606879195dfb90904a83ae1e813fbf1f2339924.exe"C:\Users\Admin\AppData\Local\Temp\be11ec7808bb53d7cfc074e13606879195dfb90904a83ae1e813fbf1f2339924.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken