Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
26/11/2023, 11:04
General
-
Target
dope.exe
-
Size
1.5MB
-
MD5
155f8014c4f3319cf9bdf65bf2c29f42
-
SHA1
9fedaa42435f6131d5e99252731dbff0c075e3d6
-
SHA256
f2e9be17d91fabf119ad4c318887a282fec3744841f53d4118d4eca2009e8fd1
-
SHA512
2fbeafa3052b59f22239212348f9aa4b2466342c299f6226a965d760997b56bc0732882700b79bd54d92b66eba0da7c6a15480ea624f280339f87f0e165f7817
-
SSDEEP
24576:IMwzsXuX7vt4INWTqaDS33KL1vjzSbaRa7LBLk6aqzIqHwUeEQbjL7knJPLohAn6:IMwYXE7lNWjsKhvjGB7dLk6NLw5bsMhm
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dope.exe"C:\Users\Admin\AppData\Local\Temp\dope.exe"1⤵
- Suspicious use of AdjustPrivilegeToken