Analysis
-
max time kernel
151s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 22:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
063d98e92c51f9865ccfd7742e4562fa.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
063d98e92c51f9865ccfd7742e4562fa.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
063d98e92c51f9865ccfd7742e4562fa.exe
-
Size
2.0MB
-
MD5
063d98e92c51f9865ccfd7742e4562fa
-
SHA1
d2d24f5ba1c47b45d8a23ebd8a9b3abddb1364e4
-
SHA256
605f429a9db0a1b3847070ef97faeff96cf1d124f6b025110e78ee7fa0e24274
-
SHA512
01f829a1cd5f4635c51aca67d67517d750e7ebee51206c53a219361923accbde35058a4c53dda4279b7e8e1324381f93bce3f1d730d636ee04ce3f7277cca6e7
-
SSDEEP
24576:6qT3MkvR9VOnRdBWR8O/v2rcHmaL8ICC+tpAnxQUIIEX3mnFdf8sBct6+OaPjNXO:fTV9qROnyOj80RxQUIty5cwNl8O
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4620 063d98e92c51f9865ccfd7742e4562fa.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4620 063d98e92c51f9865ccfd7742e4562fa.exe 4620 063d98e92c51f9865ccfd7742e4562fa.exe 4620 063d98e92c51f9865ccfd7742e4562fa.exe 4620 063d98e92c51f9865ccfd7742e4562fa.exe