Analysis
-
max time kernel
149s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07/12/2022, 02:57
General
-
Target
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe
-
Size
17KB
-
MD5
cdcf0bed49e64ce2cb1c16080892d4a6
-
SHA1
1f51ca081ec033e500083aa528640eeff5a1d210
-
SHA256
db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7
-
SHA512
a53e9c7de01100834fdf89c2308c44860ad974dbfd8e383c8e8b7735674359b6d7b6eeabca1322ade7bf4987fd3c6ad6ed415d4b6fc4f0050ca0bf2d94a3cc4c
-
SSDEEP
192:o0v8jVcS0IAw64cYY96x0qJqvDJZlbtWxwkCAAzEjPxZBHEB8P/Kndk0fvvYQivd:HgCS0iFxJqLTNtWx5CPmEBlp3fs
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe"C:\Users\Admin\AppData\Local\Temp\db4068b47ca7788125e54446c1c38e800dc9c2854f6094702af2053293a96ec7.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken