Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2023, 13:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sample_0.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample_0.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
-
Target
sample_0.exe
-
Size
28KB
-
MD5
9b53f40354ed59b7f3493aeaa833d5b2
-
SHA1
49b9f95f7f83095894d47180e8af0e63d67fb610
-
SHA256
18a9e61a082feb6c7e04d9aef4a0a0d5db926158562e7d3d408413fc4efdbbac
-
SHA512
0329ba980762b60b25bbc899e46ac08da78d4a594591fb927b4f91c9185f040b95ce40b919768914ed07672d7cc9a9c8672166b71f617da2ad338ad743c54f9d
-
SSDEEP
768:XIuOxI6zWJd1rFSuw6IilCS/Wh7GjcIfU:XgxI66JUurNCSelGBU
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4692 sample_0.exe 4692 sample_0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4692 sample_0.exe