Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2023 13:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a5a6ff4f54882a304a17a7857f50c8be.exe
Resource
win7-20231215-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5a6ff4f54882a304a17a7857f50c8be.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a5a6ff4f54882a304a17a7857f50c8be.exe
-
Size
1.6MB
-
MD5
a5a6ff4f54882a304a17a7857f50c8be
-
SHA1
3f54a65bf1b647decc1f09283111d9f9f739b5f7
-
SHA256
88685fd541c4b6d5c18f9327d40bf7dda69476263e54cd27b884933eb9aa012f
-
SHA512
19e46e35c76f0891eddfaa207c9bbfe7d291415dd73af6923ccd1a34a0f70dbca86ea8e6c832e5a71e7a40e312e187429c3df579f936447cb0c32215ac341884
-
SSDEEP
24576:33yVMCtIZJntOFmMlMqPilaiS4Yr6ugPngPfjv9tLF2cH8g:o8NlaVeuHF
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5060 a5a6ff4f54882a304a17a7857f50c8be.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5060 a5a6ff4f54882a304a17a7857f50c8be.exe 5060 a5a6ff4f54882a304a17a7857f50c8be.exe