Analysis
-
max time kernel
65s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
19-04-2023 17:29
General
-
Target
NolvusUpdater.exe
-
Size
26.4MB
-
MD5
5836fd7542ae9266e88c9f43c71c930c
-
SHA1
6ea4cb6cc981c7c490bdd0dd265966bcecc78ca2
-
SHA256
fd80be8d89c239f8bb7ad5fe330cb3abe7cfbefc7aeb7e64d806631fffb2f796
-
SHA512
2d11b72a9319b6d41fa8d93045bf2eff576750abdfcdc0f47d2c7ee103fb3386a41908327b6e5b9ace3773e55b2bddfe5e7a7f9a5807a7e48b70ad4fe0b37961
-
SSDEEP
393216:tDiUt2CzmoNFpyKisWCV7MuVvuxv8L+iQvzNNX:AUt2Cqapy6WNU7KzNNX
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NolvusUpdater.exe"C:\Users\Admin\AppData\Local\Temp\NolvusUpdater.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26.5MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB