Analysis
-
max time kernel
179s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03-12-2022 00:19
General
-
Target
8d7bf86ed411f4693c179b23d05cac8149f598320a53197feac7ed62ebc31b49.exe
-
Size
42KB
-
MD5
7d9ab116a4241f839fa9e3bd9564909d
-
SHA1
0a3b6c4a329ae2dd7ac29edda20f3389a869ca89
-
SHA256
8d7bf86ed411f4693c179b23d05cac8149f598320a53197feac7ed62ebc31b49
-
SHA512
96375878fb7a8a84d22761c9da1ad284e07ca4b49474a4272d397fdd5a85c36e693f0b6a3091b112504ba9a723a65df8be5a3a32f87b9486d5fd72454cc04487
-
SSDEEP
192:kv0vfiMQxgLsUj0C7+wcjRljC/T7IWymYHNJJPWTc+OCuU0u0OE4sBDle8G:k4utoq/HjC/T7IaiPQc9U0u0OE4kzG
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d7bf86ed411f4693c179b23d05cac8149f598320a53197feac7ed62ebc31b49.exe"C:\Users\Admin\AppData\Local\Temp\8d7bf86ed411f4693c179b23d05cac8149f598320a53197feac7ed62ebc31b49.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken