Analysis
-
max time kernel
42s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
06-12-2022 11:42
General
-
Target
f7c22685062e7236da19b724442a8b6e1967c58561b44c58bc84c4e827c23788.exe
-
Size
91KB
-
MD5
e37dbe5b66d0547a293a93db3d7b5438
-
SHA1
0e225f04145dcfe28bb7f39df80725225a0d5e89
-
SHA256
f7c22685062e7236da19b724442a8b6e1967c58561b44c58bc84c4e827c23788
-
SHA512
ccba419a77000b85b978cfbb1d73cc29b405fcd2bc4dd2fae3227ba6d3c7890a72780a6f8c3dc7173e4116cc039a016cb0cda1ac68238a70c99716784dfa3de5
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFC8:NwtRonyypexoiNtxYGC8
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f7c22685062e7236da19b724442a8b6e1967c58561b44c58bc84c4e827c23788.exe"C:\Users\Admin\AppData\Local\Temp\f7c22685062e7236da19b724442a8b6e1967c58561b44c58bc84c4e827c23788.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken