Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2023 16:47
Behavioral task
behavioral1
Sample
08717399.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
08717399.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
08717399.exe
-
Size
22.2MB
-
MD5
34028e2d59d73ba916600cecd5334c4b
-
SHA1
4e6575aefaaec7386a2b49201d065bf570ef920b
-
SHA256
decc5c92b09bb6ef97ad68caf0ec802c530aa8974cd6a90ab313c8a309bf27f3
-
SHA512
07c9dd03ebda2cb052c0aac573a4a171f41b9c04b72d2930df2f0b85cb1436b9fd8ff4de5a3e11b077e8a2b2b24f18b0528f0d46ff524dc6d5bdeaf91dbf0a60
-
SSDEEP
393216:Cai0ZMwOuyq8JO6aNKwHVbbZ0ErC+fuVxL6jkCGMiMW7DnKSCK:avqiGQwUKBg6GMiv7f
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
08717399.exedescription pid process Token: SeShutdownPrivilege 4988 08717399.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
08717399.exepid process 4988 08717399.exe 4988 08717399.exe