Analysis
-
max time kernel
120s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/12/2023, 20:47
General
-
Target
WindowBlinds/wbinstall32.exe
-
Size
97KB
-
MD5
f96d39caa6b1db84d2879a8349183c23
-
SHA1
d84ed7353e19936ab4e3ed015baba8e2e79bb10e
-
SHA256
7260ca00ce6a7f8051968ad34051927339422f4c7fd77454ad35aa165f61ef72
-
SHA512
19274dd0b3776e82a76504daf327e084d8bc990da247b3d2b576e1a5868ee0256546ece8b711fef3c8cee636f08e54d2230666a1c5f2d35ad2bed5658cdb5623
-
SSDEEP
768:Z8qi7LkxK8zBeN/g+XPj/6XGYSF9hkmeYbzkPCG5aZU9qZU9en1HiLo:Z8qi7IxKuAR5XmXGYSFHk7Y8d5aprnIE
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WindowBlinds\wbinstall32.exe"C:\Users\Admin\AppData\Local\Temp\WindowBlinds\wbinstall32.exe"1⤵
- Suspicious use of AdjustPrivilegeToken