Analysis
-
max time kernel
236s -
max time network
326s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 15:11
General
-
Target
8ed1ad72de713275a635cc80acc7af98f93ccbe79854373f84e881fa27be39f4.exe
-
Size
62KB
-
MD5
5c3215c66f46724feeb3e445079ec9f2
-
SHA1
7f477031a2f8081556620b212816c3ee682f0ce8
-
SHA256
8ed1ad72de713275a635cc80acc7af98f93ccbe79854373f84e881fa27be39f4
-
SHA512
7b65031ede4061642307c7b5e563ccf286ceca8dc112ebb14b69d38bc022829c800cf509517abf55849f8e1811fb381b1d4e8c9a046fbe2f53832533dfc1948d
-
SSDEEP
1536:s9egs8vVamJcoInWu13EWt0DA0OZjvzfdFyLOLmz:P0amJcoWWu13EWu+vBY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ed1ad72de713275a635cc80acc7af98f93ccbe79854373f84e881fa27be39f4.exe"C:\Users\Admin\AppData\Local\Temp\8ed1ad72de713275a635cc80acc7af98f93ccbe79854373f84e881fa27be39f4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x300 0x4a41⤵
- Suspicious use of AdjustPrivilegeToken