Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
02/08/2023, 08:40
Static task
static1
Behavioral task
behavioral1
Sample
DesktopInfo64.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DesktopInfo64.exe
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
DesktopInfo64.exe
-
Size
6.5MB
-
MD5
0f78d88978c07c80e0b985f659f45337
-
SHA1
a720afae3f346ef6aff0f64d47202b1c02657874
-
SHA256
faa412f860119a6e530e50e921ad9d74005737831a148620c42209376d7a2c1d
-
SHA512
f7bda4861ff37fce6914542470c0c591f381a0fb3461376ff1b3fefe8cfe21fa2af637fd9393e506668bc522b13508f4b3a0b2af8fa12a91db5abd29ca8942cd
-
SSDEEP
49152:Dktch9L/4XvMQIOYE/u3OSkiyJV4NpCTucPv0uURhOQMHy51fVgZT3F+1:Cw78IQTXU
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 56 IoCs
pid Process 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe 1312 DesktopInfo64.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1312 DesktopInfo64.exe