Analysis
-
max time kernel
139s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 14:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74f643fa281f11d36a59c3958b0627a0.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
74f643fa281f11d36a59c3958b0627a0.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
74f643fa281f11d36a59c3958b0627a0.exe
-
Size
596KB
-
MD5
74f643fa281f11d36a59c3958b0627a0
-
SHA1
ebcee25409f04db456d9d9019ca7ce3a1b0fb77b
-
SHA256
9cb67de98983415f7f465b394168c45f71857043252277d0b23214f5f99dba31
-
SHA512
9bac50ecf562a143c62d9d551f8ddaa01d5b2f39c5d86130f6e518302f593fad4296aa6c12ec1abc9077a2606f0ca075f887358eae479dee3f3c2e560f7af773
-
SSDEEP
12288:31ubh/SosKVlla8PEM43pN60h4huu8lbqnBILOq418+Dd8u0ot4y9SUO8gni:FubJSOVl9f43pN6z8lb8Rq4b8g4y9SUn
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 348 74f643fa281f11d36a59c3958b0627a0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 348 74f643fa281f11d36a59c3958b0627a0.exe