Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12-10-2023 16:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Deploy-Application.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Deploy-Application.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Deploy-Application.exe
-
Size
268KB
-
MD5
aab8dcc862ea03c019ca3858e63b1065
-
SHA1
dafc9419fcc4ef2ade508f2d8b5077e765e3a8d6
-
SHA256
c7d2f4462acf30d5a164894dd797ffe47b2ae661922f2543fbc88ff3a13b6e5d
-
SHA512
06bc3bc52596c499edf411bb0ad6516a95e0dd82d6bf7eae98d878a136fb4c8ac8b410917c2c7c2de17f41e9b411d6e01452d7cdd46fe370d03e7999df36af9d
-
SSDEEP
6144:lJ0boqQYeP9wcUACyYgrP+uJnPKZdHlu5WRhlpx929q0w6LypMOedhPZh:jyQxP9wcUAagrPzJn2u5WRDpxYEuj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2188 Deploy-Application.exe 2188 Deploy-Application.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2188 Deploy-Application.exe