Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 05:20
Static task
static1
Behavioral task
behavioral1
Sample
SpyHunter-5.13-71-9911-Installer.exe
Resource
win7-20230220-en
windows7-x64
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpyHunter-5.13-71-9911-Installer.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
SpyHunter-5.13-71-9911-Installer.exe
-
Size
6.6MB
-
MD5
3ce9158024e74733de9ab2232fb73dcb
-
SHA1
5fc8ed33206ab5b93f736114ba99bf47f81bfef6
-
SHA256
e7dd3449cb2fd81c06e0f5c19e20b280c80fc4533356f3bf67fdfcb6ce238056
-
SHA512
ac2e9d45a992513d8f4efee73f5a7166071b837302fc91888122d6a211b0437de75776d509b308809751b7c9fad69ebca5f8c6835d66b6fcb467f4cd434f06bb
-
SSDEEP
98304:qzCgxMDk3jEO+F7qxBO7j/11ajr5pJ+9PbES9qCJV03oJT2wIZx3oIODbhHMxvTk:qHMOjEO++CqFpJ+9PbxXV0YJzD9HMxvY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes:
SpyHunter-5.13-71-9911-Installer.exedescription pid process Token: SeShutdownPrivilege 1160 SpyHunter-5.13-71-9911-Installer.exe Token: SeBackupPrivilege 1160 SpyHunter-5.13-71-9911-Installer.exe Token: SeRestorePrivilege 1160 SpyHunter-5.13-71-9911-Installer.exe Token: SeDebugPrivilege 1160 SpyHunter-5.13-71-9911-Installer.exe Token: SeTakeOwnershipPrivilege 1160 SpyHunter-5.13-71-9911-Installer.exe