Analysis
-
max time kernel
77s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
02-03-2023 23:53
Static task
static1
Behavioral task
behavioral1
Sample
LabyMod3_Installer.exe
Resource
win7-20230220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
LabyMod3_Installer.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
LabyMod3_Installer.exe
-
Size
2.5MB
-
MD5
e967b5477427d301b340203d0a85f7bf
-
SHA1
64ce2e158ba5d4a1d1533c3d11a9730f156a7b3b
-
SHA256
151882993d9e1330dd39ad495ede37d811ccb3b441ac3ddd73a74ab20031084d
-
SHA512
0cb2194a83b23a121184338dbdcef22e04281a50a995dfb6a4b154a237123c92ed859d4e3035650a78011fb17fefdc5628e8ae08b97e3acc4d25ae71fa2b2556
-
SSDEEP
24576:kT+ug8m657w6ZBLmkitKqBCjC0PDgM5AwYV/CQxCQhXQL3s0CT+ua8m657w6ZBLU:k6VV1BCjB8/CQxCQpN0CcVV1BCjBrVQ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 5108 LabyMod3_Installer.exe 5108 LabyMod3_Installer.exe 5108 LabyMod3_Installer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5108 LabyMod3_Installer.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5108 LabyMod3_Installer.exe 5108 LabyMod3_Installer.exe