Analysis
-
max time kernel
66s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 12:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6f9a2f6e9af4b46e78db520b36d8d2f2.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6f9a2f6e9af4b46e78db520b36d8d2f2.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
6f9a2f6e9af4b46e78db520b36d8d2f2.exe
-
Size
794KB
-
MD5
6f9a2f6e9af4b46e78db520b36d8d2f2
-
SHA1
ae63e550ae9b52dd45dd4d9a309504731eddda4e
-
SHA256
c8f96f446c2b451616b70ebe0a2712dbeac8577f1298f25cde313e7717bc688d
-
SHA512
eb90a1307a8876a853f6d0ab3e6374b1f5ecac112e98c48fa75cf119ec2a194eed6bbb781551af089d37f738592ff263d9dbd4dd35727a038770a73e1791be40
-
SSDEEP
12288:0tq7+TnOo/mmrxaDqR28H9IzGiiwiqET4g7MUoxnsOEsj3d9TN:0ta+TB/VrvEocCwrET4g7yrEGt9T
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2180 6f9a2f6e9af4b46e78db520b36d8d2f2.exe