Analysis
-
max time kernel
180s -
max time network
226s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06-12-2022 11:41
General
-
Target
fd7e28b1fdcc997dee020dd57c266235b01a0095022c958bc58e7a8586052b18.exe
-
Size
91KB
-
MD5
ea29b4ac4f1f2b198a08ef83c07c6525
-
SHA1
9fd07ce859a38772b39cc50c0ff405f40e304304
-
SHA256
fd7e28b1fdcc997dee020dd57c266235b01a0095022c958bc58e7a8586052b18
-
SHA512
4a90064b83816eaca67020ff20cae25cf9cf507aa064269ee58f010782eb52104e8036b0a3b98f2028bfe4a2724a1e4447bdec14be87f6ec5d4918181ce0c955
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFh:NwtRonyypexoiNtxYGh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd7e28b1fdcc997dee020dd57c266235b01a0095022c958bc58e7a8586052b18.exe"C:\Users\Admin\AppData\Local\Temp\fd7e28b1fdcc997dee020dd57c266235b01a0095022c958bc58e7a8586052b18.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken