Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
06-12-2022 17:44
General
-
Target
a6057203df16c9f727ccde335b13fb80a187fefe7da76c5b3af036852dad6cd7.exe
-
Size
124KB
-
MD5
54b6f99d9506023b51bfc9c0ccb7d904
-
SHA1
b82e1085eea34d10d5c70637759592f185b60df0
-
SHA256
a6057203df16c9f727ccde335b13fb80a187fefe7da76c5b3af036852dad6cd7
-
SHA512
16675881d5ae5c4338ce50ea108a3aacbf1092166a5e01c8e58842529d33dc963c4e176656cc408d07e1c2765cef6d7c9511d91e8ae48cdf284bd8cb2e977c16
-
SSDEEP
3072:70QPj4ApntEdqj+LrGEgjSCb0l3CIkCVF0H:I69SKHS8yyIksW
Score
1/10
Malware Config
Signatures
-
Kills process with taskkill 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6057203df16c9f727ccde335b13fb80a187fefe7da76c5b3af036852dad6cd7.exe"C:\Users\Admin\AppData\Local\Temp\a6057203df16c9f727ccde335b13fb80a187fefe7da76c5b3af036852dad6cd7.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\taskkill.exetaskkill /f /im Ksafetray.exe2⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
-