Analysis
-
max time kernel
144s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 05:53
Static task
static1
Behavioral task
behavioral1
Sample
f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe
Resource
win10v2004-20220812-en
General
-
Target
f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe
-
Size
550KB
-
MD5
ee6ca869063324f2edbd317cfebd0e52
-
SHA1
55be6527e06f2990936a331e08037d962aca6c25
-
SHA256
f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986
-
SHA512
da2900f328d239188de5e1d479827d727704bd1a2ee8f596d43a0ea7f08ea9a3b030912cf7df31cd1be8c5b0e3b23dedf70e5a95088fbb1604285c2d7975bc1f
-
SSDEEP
12288:6tSOt7/omzMqVUZ7DvDMLlmVvwK+1/NjdvWhxLS5zny:Y7/omHcXemVvwK0RWDL8zy
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4500 f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4500 f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe 4500 f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe 4500 f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe 4500 f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe"C:\Users\Admin\AppData\Local\Temp\f3e4283b0ceb00161b0a680cb7f3b64d05121f92f8f7cdae13b52fe339371986.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4500