Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12-10-2023 03:23
Static task
static1
Behavioral task
behavioral1
Sample
5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe
Resource
win10v2004-20230915-en
General
-
Target
5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe
-
Size
6.5MB
-
MD5
90d993c0fccc58d5377018493763f8f0
-
SHA1
4f194124db4f911b26cfb1fc52634c7a3b2b4417
-
SHA256
5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844
-
SHA512
340b2ca78c485b057f074bf70c4a9ed063648fd206ffe813564ff618bdef9251bd623bbab5f834d7205b3a35e581f7c1a20b79ade994727b4005d285e2423c6d
-
SSDEEP
49152:5GnkEMF2tGosMzWfrnvtwLptXq+dI729euG1VbQZOaJK31V+NmxagfIApcmUpsdI:5GireXttXq+dI729euG1aK31DjjCjEp
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1952 5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1952 5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe 1952 5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe 1952 5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe 1952 5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe"C:\Users\Admin\AppData\Local\Temp\5c5e43c5161f0b36d3397d7e8125d9b6ce25b31af554ba24b87b189e7125c844.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1952