Analysis
-
max time kernel
207s -
max time network
216s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/12/2022, 02:54 UTC
General
-
Target
dd8d30002672ae69950a9bcd51419c3cc3820fc208da56275b44d64e4cd2dc8a.exe
-
Size
3.3MB
-
MD5
ee287aa99242ca4931361fdc451d663a
-
SHA1
60d61fbd7339f2f0aae5b5e9e68f452868b5f878
-
SHA256
dd8d30002672ae69950a9bcd51419c3cc3820fc208da56275b44d64e4cd2dc8a
-
SHA512
9876c2b5383a11dcf7b357667cfd12a8a7f43262c95e5bcca2d9ab802fc69a90699b42577e4610b95541f00383b39f6800b5c971e4973d432c1c2a6dd5d07318
-
SSDEEP
98304:Fi1YKh5EC+AhIddIB4jlstgKr5NQLtD6aF:LKhuC3addIBRBrPQLs4
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd8d30002672ae69950a9bcd51419c3cc3820fc208da56275b44d64e4cd2dc8a.exe"C:\Users\Admin\AppData\Local\Temp\dd8d30002672ae69950a9bcd51419c3cc3820fc208da56275b44d64e4cd2dc8a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
- No results found
-
93.184.221.240:80 -
104.80.225.205:443
-
20.50.201.200:443
-
20.54.89.106:443
-
20.54.89.106:443
-
20.54.89.106:443
No results found