Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
26-08-2023 22:07
General
-
Target
6597b2d706140a55d45c4fa7d43b59ce7c2deaeb3f990f5ccfb72ed83fa2580c.exe
-
Size
652KB
-
MD5
614740605ff39762dcbb1f3d4d51e5f3
-
SHA1
6e42f9b7816a4938e895f91d62a11f93876d4075
-
SHA256
6597b2d706140a55d45c4fa7d43b59ce7c2deaeb3f990f5ccfb72ed83fa2580c
-
SHA512
1418eaae50b35521c6a6cb19f0f64df434b9fd4c77df054cab7aadf5a6c0b0cd032094a88fc2a9a376375f414757549bf296cd75c986c8c583ada26bdc25e569
-
SSDEEP
12288:jW+MbpmEYt2lhTT56aLiZjYgGxjEkU/fyN:IbpmJtghAaLAYLjEl/fyN
Score
1/10
Malware Config
Signatures
-
Kills process with taskkill 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6597b2d706140a55d45c4fa7d43b59ce7c2deaeb3f990f5ccfb72ed83fa2580c.exe"C:\Users\Admin\AppData\Local\Temp\6597b2d706140a55d45c4fa7d43b59ce7c2deaeb3f990f5ccfb72ed83fa2580c.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im ×ÀÃæʱÖÓ.exe2⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
-