Analysis
-
max time kernel
72s -
max time network
76s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
06/07/2023, 12:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe
-
Size
6KB
-
MD5
60f9d41dbf15db0cfb5a83f3e2daf9de
-
SHA1
677cec954a6544194730fa3f1a171e4f9da89846
-
SHA256
e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2
-
SHA512
75b334704f1f05ecc5921b15250be323d416d340198f1fd4c9b1e919890ae41e9e23174f24436512e6711c925864100cb7d72b1ec4423211e686075cd34109be
-
SSDEEP
96:9B3PQ9eQxOTiLMMDDnegWNcWOCEMfOzNt:9FQMrTigMDtYcWOCEMI
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2324 e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2324 e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe"C:\Users\Admin\AppData\Local\Temp\e6d70ce40f459c3b53c9623764df19490ab994f70c170649afac65b12599ccc2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2324