Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 04:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1.exe
Resource
win7-20231215-en
2 signatures
150 seconds
General
-
Target
c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1.exe
-
Size
1.4MB
-
MD5
6b388b92a6129fde94255cfd203da7a3
-
SHA1
e59b69bfceff5ce28cc6f434f89c735f34c10d82
-
SHA256
c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1
-
SHA512
fb5434593ce021dbb800c0fa380297b0da6ceff690590721eb47d5021b08334b20e2ddad244a5e522d9007b1ba6371e6e085719c8046c6ac507b8aa8b8bf305a
-
SSDEEP
12288:OO9B+VY8quMPLjg4YqLgvB6dMSJ3oecwJE97O8k4QrsdJW3kFk9huIFYPSbwL:OO9BeqtL+SgvqFE1d3ddJW3CAqPSbwL
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1304 c7f577cefa301fea0c4819768680b4750bdc67a55e04a766a6d94a190bb9e9e1.exe