Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
16/11/2023, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe
Resource
win10v2004-20231023-en
General
-
Target
7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe
-
Size
3.1MB
-
MD5
e06ec58241b707f13a299491d988937d
-
SHA1
fc9b0836613130ae50e9c3d8fa2c939449ad4e9d
-
SHA256
7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10
-
SHA512
bbc6b408f39e717cf3c2a023c0ec5b0d728777fcb71c6ee844d4b03932699ca04ebda714076b7d383ed517853c833992dd6a853c46e1bbdadfbc7cde90072fb7
-
SSDEEP
49152:Tfv/XRm3fUHv648igad1UUi9Gi2G+KXm9T53/A1Nc3Wad:TH/b6YgafUT2Gh2P/CO
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1368 7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1368 7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe 1368 7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe 1368 7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe"C:\Users\Admin\AppData\Local\Temp\7d57ecc00f056c3f1fab28babb7aebf7a0761c3749dd30ef14392c0b1b8e7e10.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1368