Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 23:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c33c2e15aa412de4b9f2daea98f80110eb89ac93bfa563d59cf8c8ad9eaf0862.exe
Resource
win7-20231129-en
2 signatures
150 seconds
General
-
Target
c33c2e15aa412de4b9f2daea98f80110eb89ac93bfa563d59cf8c8ad9eaf0862.exe
-
Size
1.3MB
-
MD5
9b2856a6d833442e612b7cc6df19d956
-
SHA1
d2bf09ba92d18fa7cdf39f2ae5c63f9abd1f587b
-
SHA256
c33c2e15aa412de4b9f2daea98f80110eb89ac93bfa563d59cf8c8ad9eaf0862
-
SHA512
0c332a176c6ea6560728783535e51efa3363e613c781f1f9cf915d3fa1e48ac58250fe262e7f6004dc8d5e0f4063e2d79194fbc2026c72db45c912d3325a3c36
-
SSDEEP
12288:Jf9B+VTGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:Jf9BPt/sBlDqgZQd6XKtiMJYiPU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe c33c2e15aa412de4b9f2daea98f80110eb89ac93bfa563d59cf8c8ad9eaf0862.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2880 c33c2e15aa412de4b9f2daea98f80110eb89ac93bfa563d59cf8c8ad9eaf0862.exe