Analysis
-
max time kernel
502s -
max time network
505s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2023 17:42
Static task
static1
Behavioral task
behavioral1
Sample
SpyHunter-5.11-71-9911-Installer.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
600 seconds
General
-
Target
SpyHunter-5.11-71-9911-Installer.exe
-
Size
7.4MB
-
MD5
911736872bcb9f85b9181c7d785ee032
-
SHA1
806691ea5f3cf3cd335b00e436c51c9cb85bc9a4
-
SHA256
46dda74095b229c3724b4ef7e5f4c05b0b0e15426ca76e9ac947475f21459d19
-
SHA512
016c73a7e8ecad84ba73e220a37869bdf8465411a2085133112ba1215b92553c3ff7194e425b94b13b43f0152a0c1194376c87c5ffbd2441df0f3236d2b8fda6
-
SSDEEP
196608:i/VwpAGiJt4L0cYWkLTUSfNH6w6T39HiBD:ibJ20BTbHICD
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes:
SpyHunter-5.11-71-9911-Installer.exedescription pid process Token: SeShutdownPrivilege 3092 SpyHunter-5.11-71-9911-Installer.exe Token: SeBackupPrivilege 3092 SpyHunter-5.11-71-9911-Installer.exe Token: SeRestorePrivilege 3092 SpyHunter-5.11-71-9911-Installer.exe Token: SeDebugPrivilege 3092 SpyHunter-5.11-71-9911-Installer.exe Token: SeTakeOwnershipPrivilege 3092 SpyHunter-5.11-71-9911-Installer.exe