Analysis
-
max time kernel
152s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04/12/2022, 07:01
General
-
Target
c4e91571bf8ba417c874d90a95bbf5840027a05833c5e6195f0a90cc6b02a93d.exe
-
Size
28KB
-
MD5
9f44066cd73f1463c4e413aaf4becd83
-
SHA1
be07101203e8ccaba1311c0a4131287290924408
-
SHA256
c4e91571bf8ba417c874d90a95bbf5840027a05833c5e6195f0a90cc6b02a93d
-
SHA512
b2e828a8a76f565bc834eb94d3f3da0a7c5b500cde21626c26c7a3d3a786036485995e0101afce28d8d3cdec320072c352e48b3acd5b110b5dcb9545e089e4eb
-
SSDEEP
192:Ais3vTfqj2cf1zszWlQ6Z7WUSaRbJzkWeBxpM++0CdW04z5f3vMfiQq68OuHYCwc:sTJcfl/Z7W8b9kQ+cJINEf11e4Cpbx9Z
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c4e91571bf8ba417c874d90a95bbf5840027a05833c5e6195f0a90cc6b02a93d.exe"C:\Users\Admin\AppData\Local\Temp\c4e91571bf8ba417c874d90a95bbf5840027a05833c5e6195f0a90cc6b02a93d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken