Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06/12/2022, 17:52
General
-
Target
dc33b6371ede667b1d90f4039a41fd86abc73027aed192aa43647481717d897a.exe
-
Size
19KB
-
MD5
1d5064ea280c1f0d1564b4d3277b6408
-
SHA1
e90e56c2614ee75b7f87c0de1d93853241870123
-
SHA256
dc33b6371ede667b1d90f4039a41fd86abc73027aed192aa43647481717d897a
-
SHA512
aaa8010aedea1f7c8198600980c11ba43484c9987a4e2e50dca0041be4b6524ea65099f95a69883e6ee49beabb59a37c4896a9b3956339aa618b4e9bfc779045
-
SSDEEP
192:kao5vYrmIZ9JKxQU5FgOmMZh5DIL0qm8C+AFwyN5vGZa2qcDAdh0kvW/m:kvVkZ98C2ZhNympJL+EoIh0kvW
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\dc33b6371ede667b1d90f4039a41fd86abc73027aed192aa43647481717d897a.exe"C:\Users\Admin\AppData\Local\Temp\dc33b6371ede667b1d90f4039a41fd86abc73027aed192aa43647481717d897a.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-