Analysis
-
max time kernel
47s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
25-05-2023 20:43
Static task
static1
Behavioral task
behavioral1
Sample
PlayniteInstaller.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
PlayniteInstaller.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
PlayniteInstaller.exe
-
Size
248KB
-
MD5
216721738f08fbd3b233e07619950619
-
SHA1
08c9849bfc78aa4f8f358cbf2301598fdb48620f
-
SHA256
2b2ff0f08c60f44ce321573ce0f00a44e336538775735a8f5d6644a12b46124f
-
SHA512
24d6f3e6cd9b823169cdcce8977f03b38a7b9579ff8c65257570de9aeb440cf966fc2c571d9de363d10eead47a49c58bf4d55f9ae2860a0fea76cc84e77426cf
-
SSDEEP
3072:xNi5RzqbBZCKzSU/8+xFO0AtqtCi2yJir3YgECNWmkCK2yJir3YgECNWmTN8lQx1:7iDzqfoKtO0Atq6Z
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2028 PlayniteInstaller.exe