Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
-
submitted
04-12-2023 20:23
General
-
Target
ec44e64dd0430eec3f0fc4f70befaa8cf61a92e1057a3c612f524e9a01857fbe.exe
-
Size
9.7MB
-
MD5
150bc317c23fe447b59e97c658c6a12e
-
SHA1
63725d9f37febd9932aa6143801e85d1f12377f6
-
SHA256
ec44e64dd0430eec3f0fc4f70befaa8cf61a92e1057a3c612f524e9a01857fbe
-
SHA512
993f9b03e09d8177393cf6d7c895bac8fe40e7b6834c6177dc44eb612c1f2f4547df5e1bd8848eebd8ce03d310b32ad2d7337baeca5f59511dad81d8002b3e01
-
SSDEEP
196608:Pv1X051hR7VIKp8ArjBMHmhnBRO9c+N/u:PvpUD/BxhndB
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec44e64dd0430eec3f0fc4f70befaa8cf61a92e1057a3c612f524e9a01857fbe.exe"C:\Users\Admin\AppData\Local\Temp\ec44e64dd0430eec3f0fc4f70befaa8cf61a92e1057a3c612f524e9a01857fbe.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken