Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08-10-2023 12:52
Static task
static1
Behavioral task
behavioral1
Sample
bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3.exe
Resource
win10v2004-20230915-en
General
-
Target
bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3.exe
-
Size
1.4MB
-
MD5
4f92997d6990055beb2154cd9f4eabff
-
SHA1
efb37d7a06131b87f2258b7837d6b14033fed43c
-
SHA256
bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3
-
SHA512
0f5a0a98376fca16c93bac998557d5c4c2815fef619725c3a09178f68517cefd04dcd3d6242ad3cacbfce3ec1c3d6d0e314cd5f12f94db37c27d5ce6b2c763a5
-
SSDEEP
24576:F8CF7ldz0a+6boVjTUIBSnUThwMK/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:Xm6EFTUySUTsLNiXicJFFRGNzj3
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2180 bc4b93322a6c0d44fffe579bddff0e4ef8b49283f102a0905f6473955c8502c3.exe