Analysis
-
max time kernel
32s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
18-08-2023 21:03
General
-
Target
Adobe GenP 3.0/RunMe.exe
-
Size
1.2MB
-
MD5
a41ef7d298a96ff2e0b51d255d554568
-
SHA1
feb27dfb80c5951cad8a1cb3642cfcbf16e3db4b
-
SHA256
2063b7289bb34b2e732970437b183b9d112cd3a4e5db9b13bf5bd0f485856c27
-
SHA512
093f5744b1e6e7266d855b63eadbc3d98db9da7813dec0af5b10f3402a374711174c8205af41c99486bd223b95e0350b053be9d7e8d7e9ca10df35b6628db442
-
SSDEEP
24576:mrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9Tva4HeqtGHA:m2EYTb8atv1orq+pEiSDTj1VyvBa4Hel
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\RunMe.exe"C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\RunMe.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\Resources\NSudo.exe"C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\Resources\NSudo.exe" -U:E -P:E -ShowWindowMode:Hide C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\Resources\Adobe-GenP-3.02⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-