Analysis
-
max time kernel
322s -
max time network
411s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06-12-2022 07:09
General
-
Target
cfa26eced28e658018619c8eabdf35ddd85239aff096a93cba09a64cc4c66f68.exe
-
Size
76KB
-
MD5
995244b6b585aa7e0aaed077fe19de73
-
SHA1
841600653f2318cc944fa79f2f0a9a7ab4996efc
-
SHA256
cfa26eced28e658018619c8eabdf35ddd85239aff096a93cba09a64cc4c66f68
-
SHA512
782c4f54871dc6ef78eaa3815ff30e6a3eb1628f3e9aed10e28e568aa0d7f433db9e6c4d19f1a92c179458b78289523557aa464a009f94c5b3e62eb316195c3f
-
SSDEEP
768:UIdrYQjUzpz2fIcoDnhIxFhavLGzrXh7FSvWDZjRRSj6w+0jnRVGS5wiM6ejHkXt:NdMpzTaEKzrX6uDZjRX44PBHkvoHn1Y
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfa26eced28e658018619c8eabdf35ddd85239aff096a93cba09a64cc4c66f68.exe"C:\Users\Admin\AppData\Local\Temp\cfa26eced28e658018619c8eabdf35ddd85239aff096a93cba09a64cc4c66f68.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken