Analysis
-
max time kernel
47s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11/04/2023, 12:11
General
-
Target
http://file:///C:/Users/shakr.saif/Downloads/krisp-v1.48.2-x64.msi
Score
7/10
Malware Config
Signatures
-
Unknown use of msiexec with remote resource 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I http://file:///C:/Users/shakr.saif/Downloads/krisp-v1.48.2-x64.msi1⤵
- Unknown use of msiexec with remote resource
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow