Analysis
-
max time kernel
137s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2023 01:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
292761a5b3a24e29dc6c1521edd62b70.exe
Resource
win7-20231020-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
292761a5b3a24e29dc6c1521edd62b70.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
292761a5b3a24e29dc6c1521edd62b70.exe
-
Size
946KB
-
MD5
292761a5b3a24e29dc6c1521edd62b70
-
SHA1
62718aa849a162fcab35c43071ee35c0b9304af4
-
SHA256
f144c69e0896fc8559146ce31d63e73c7d3bdfd8a650a650ae9fa7aaacb8925e
-
SHA512
413e873ac9a06c4852282017a74ab96b9495658596d8668974c6a4f5d078d85cedb0c5df63d0c950d56b9f69d09749a47792fdd7a3bd273b9b2e3eee495666c9
-
SSDEEP
24576:ITgnpwJ+Rf5SSiVw6uAX8DS52tpz9ZRzbPmSZyo:A0df5SW6H8DS52tdDpbRZy
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 292761a5b3a24e29dc6c1521edd62b70.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2296 292761a5b3a24e29dc6c1521edd62b70.exe