Analysis
-
max time kernel
167s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 09:07
General
-
Target
13e0d340c9708a10a52685619fc3b607.exe
-
Size
1.4MB
-
MD5
13e0d340c9708a10a52685619fc3b607
-
SHA1
35670e7b66b9459b428a7968f92d9c4e3ebbf62b
-
SHA256
8e210afbbd5bc1791cecea2ab031f642ded41a7b5630088d07b26bbb1935979c
-
SHA512
5d5dcd67d4c89af9804a980dce1cd732e4fe35f2e580225c7000d233da6bd0b8d51b494257ef1fe760dc84e091f2401079b9d6649dd6d226df0ec709bb05c56c
-
SSDEEP
24576:b+JoRxlYOE7gZJ6FCqgKo/HkkVv5A3a+OTcQ1kft65W2VTHQ0JAre:bt+rkHkqA3aXTthWUHPJAre
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13e0d340c9708a10a52685619fc3b607.exe"C:\Users\Admin\AppData\Local\Temp\13e0d340c9708a10a52685619fc3b607.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x50c 0x4fc1⤵
- Suspicious use of AdjustPrivilegeToken