Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
16/02/2023, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe
Resource
win10v2004-20221111-en
General
-
Target
b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe
-
Size
3.1MB
-
MD5
9bdaeafdd00539be993d8e57c4c8f900
-
SHA1
287e6c173622ae4f0d102567e2d92a97195b77db
-
SHA256
b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382
-
SHA512
dc3f353e2113ad52c7b5d01c860cf559d0ab46bd8e976c74dbcff9334d1b02b6268c003f9305a20316fe9e24e1a33bb5262e30c896e14b124082a67d3b274b20
-
SSDEEP
49152:wOR3thDcaODP7sNVMhwWD+L/0Hze19gB0NlL+xBoKUSIRqbUS/dmWvYbmVTDu:wE9hDxODQqwWD+b0TeF0bn/dmWvYqVT
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2020 b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2020 b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe Token: SeDebugPrivilege 2020 b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2020 b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe"C:\Users\Admin\AppData\Local\Temp\b0139123e9c422a07423466b1b9896071c041acadeb0418c0b4feb988e0b2382.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2020