Analysis
-
max time kernel
30s -
max time network
114s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
09/03/2023, 20:15
Static task
static1
Behavioral task
behavioral1
Sample
Dusk_v.4.0.1.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dusk_v.4.0.1.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
-
Target
Dusk_v.4.0.1.exe
-
Size
7.4MB
-
MD5
c02d11e3b6bc705388b76d1a4e1fe2ab
-
SHA1
333b393ef634896278ee65cc67c9ca0e95bc402b
-
SHA256
5e31a80b81c8e9a2e7a56dc937b89ad30b9eefac1a2e8eab562d02c9fe02d761
-
SHA512
0e6fba71a56c5cf6216183a21063e0130588096b30e0274bc5f74b8dc4599701fc1331c1e28caef9334176c2f5a52184543b978f60cf9b8019ac1fd0dfe6f8cc
-
SSDEEP
98304:WIjBRnkn3aAZ5y50+AhlS3hjlIZT/mMNNjtwlUw/civJQM3Yy9MFmX//eV4d/:rDwn+WS35lI1/7NNdYJQMI+uEY4d
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1428 Dusk_v.4.0.1.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1428 Dusk_v.4.0.1.exe