Analysis
-
max time kernel
35s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
02/12/2022, 21:32
General
-
Target
92384ee4c8a375b6ed202394779843076aa9937db4445ba4e943f9203fae24aa.exe
-
Size
91KB
-
MD5
ea94027f215608ffebfec9e217b0b98d
-
SHA1
a6ea9c7201bec76af8f78bd03443f02e2bd867ef
-
SHA256
92384ee4c8a375b6ed202394779843076aa9937db4445ba4e943f9203fae24aa
-
SHA512
dfa1398eb914980327f96f6b22a6e8fb0da6ace4b83c54d4c17bf382febe1d83dcdda43aa8f6b42b12131a6df5b42457a6f8b63eb53a8280174a6bfa4e58e722
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFqkV:NwtRonyypexoiNtxYGd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\92384ee4c8a375b6ed202394779843076aa9937db4445ba4e943f9203fae24aa.exe"C:\Users\Admin\AppData\Local\Temp\92384ee4c8a375b6ed202394779843076aa9937db4445ba4e943f9203fae24aa.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken