Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
15/10/2023, 19:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
feb9c750c0a0f432248f52dcb2909600_exe32.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
feb9c750c0a0f432248f52dcb2909600_exe32.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
-
Target
feb9c750c0a0f432248f52dcb2909600_exe32.exe
-
Size
1.3MB
-
MD5
feb9c750c0a0f432248f52dcb2909600
-
SHA1
a91d9ca04513beb94d6727139ecab4d45518bcf8
-
SHA256
f59afa5f594dcbc5d36abccfa23ec564f38a179a8d4a8f739a0ec762d854a98c
-
SHA512
7290a2be6e453898c345bf92127baa74d2ec192b4b99c4be2a8050e1578ee8f5d191a735b7d0dbf2bcd1df98b0d6e73d424f4e56dcfbe4c43b51e62295fb3fc3
-
SSDEEP
12288:hSYFz/TtnxHCUvfdCz3CKBUXL/k1xW1TYSchtXIK46X4qZjfq:dFjNJPv69mL/ogpPX6X4qZjfq
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe feb9c750c0a0f432248f52dcb2909600_exe32.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2220 feb9c750c0a0f432248f52dcb2909600_exe32.exe