Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
12-04-2023 06:31
General
-
Target
plugx/5a9468a87997f2363995e264505105f6a235b66543bb28635fb74f78704e9111.exe
-
Size
203KB
-
MD5
75758f7b5ce71fa918c1c7c68d3bd524
-
SHA1
4a6ac65f6f8304bacbf176fce156cc0393aae565
-
SHA256
5a9468a87997f2363995e264505105f6a235b66543bb28635fb74f78704e9111
-
SHA512
0d6ee5345777439f69fb5b49ef7ba7687bc40467d618f77e1c81ba08ef645e1596f3019496b2df7e229ae1f274edb17cdc81124a7ca0a6478a157ca6865fae7a
-
SSDEEP
6144:NGfHWURWwbPxPDlbQsgMZZ/fu7FIRVFIV9Uc7PWW:YvWURWwbPx9QA/ftBI1J
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\plugx\5a9468a87997f2363995e264505105f6a235b66543bb28635fb74f78704e9111.exe"C:\Users\Admin\AppData\Local\Temp\plugx\5a9468a87997f2363995e264505105f6a235b66543bb28635fb74f78704e9111.exe"1⤵
- Suspicious use of AdjustPrivilegeToken