Analysis
-
max time kernel
124s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27-03-2023 09:08
Static task
static1
Behavioral task
behavioral1
Sample
5d3e8177e87cc.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d3e8177e87cc.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5d3e8177e87cc.exe
-
Size
1.8MB
-
MD5
7ff1c9a6372c91dc4c4bdd80ab09aa13
-
SHA1
73179f2744c5ec6885dcaaf94884762801a46d58
-
SHA256
fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03
-
SHA512
d7c698c48b92972aea38ad23d896a399e1854afcac254549193db267d66424dff0ccf7c6c54a8a12b589e7b275a342448990ba268554dba9381f37074da1c262
-
SSDEEP
49152:BcV+ajoJaeh/XDgUQhia5Gv2h4SFFJLKhepWY:BH8k5TgV/5GvXStLKh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4348 5d3e8177e87cc.exe 4348 5d3e8177e87cc.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4348 5d3e8177e87cc.exe