Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
06/08/2023, 17:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DuoDuoYiZhan.Setup.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DuoDuoYiZhan.Setup.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
DuoDuoYiZhan.Setup.exe
-
Size
168KB
-
MD5
febec5c9785daca55b2237e1faa961e7
-
SHA1
19da3daf76d737c4c08e69c5dd32f61d89d52423
-
SHA256
8cf2a282dae321522756265d9293464eb696acb5004f34733c80aff6e1d00e1a
-
SHA512
ab88b5bfccd0ff5102aedb927c544c2367184e7c3efa1e1c3fb4478393e810ac6d4d603605426a03eaa33b1ad66b25066e056363c00cf497e1534a77216a8a58
-
SSDEEP
3072:CVCpZCbWywl5YMMMMMMMMMMMMMMMMMMMMS/mKi3uRgvj7:CwpQbUDYMMMMMMMMMMMMMMMMMMMMH+g
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2844 DuoDuoYiZhan.Setup.exe