Analysis
-
max time kernel
136s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
26-11-2023 16:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nedqm.exe
Resource
win7-20231025-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nedqm.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
11 signatures
150 seconds
General
-
Target
Nedqm.exe
-
Size
86KB
-
MD5
634969e8d7e126dba7d9df1ba2495850
-
SHA1
5678e50a87be9b0c46e52ef259e5624022b80757
-
SHA256
9371ee974c4ebf35be61c05afbd3d3f73ac8d130346655b3374f7d9a779195d8
-
SHA512
01cdbf8c51a874bb5edfb8d3c6db7855abeb84ea41fb407fe7afc0052c54f918f3cbfd6567af4fd951a6c32c6e76a327bccc8a2e81e3a08bf19b9f5affc1a80d
-
SSDEEP
1536:CaCQ1GTdMdAP82dlvrmUrKiKpp7lpQJ5m1zr3iRNhtCCKyqw:MtIhqlDm0HK7qm1vi/z3n
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Nedqm.exedescription pid process Token: SeDebugPrivilege 3068 Nedqm.exe