Analysis
-
max time kernel
191s -
max time network
214s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 21:27
Static task
static1
Behavioral task
behavioral1
Sample
0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe
Resource
win10v2004-20221111-en
General
-
Target
0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe
-
Size
115KB
-
MD5
d41136f28ced52aa0c0ad673b2b0ecd0
-
SHA1
75ba739241ac14418ee04bc924eadc0cb608e945
-
SHA256
0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47
-
SHA512
e8f94ced2ed25842d67dc4cf572c5233534e4e3829cd82773370f043a0481d78a45919ac1a5e36c949334d748699fcd72519566fe6dd163d0707a829767214f6
-
SSDEEP
3072:DRCKtOownqTp4SPdBghvP0GCLe5yptiWY1qAkn:Dvttpd44k30dCw7HYc
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 848 0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe Token: SeIncBasePriorityPrivilege 848 0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 848 0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe 848 0e685931ee2f7518cad1397379451627c653356094d32415b8c3df6613895f47.exe