Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
29-12-2023 12:50
General
-
Target
Fastcopy 5.4.3/FastCopy64/FastCopy.exe
-
Size
1.1MB
-
MD5
4817896a7d7486dd8283d5224886596d
-
SHA1
18bbb74628e8138467be9239de01f3872749d6ec
-
SHA256
0af0869004ab7de4c3b965d73bd9801b4d3379d4adc1157984d61167c6ceecce
-
SHA512
f504999455f17af91604aa99b00df81f92f82b5b5192767059aaff8c1fac39ef45471466b1e18b743e16e34afc3a5e290abd2849fa499aa3d27d2b31573c6511
-
SSDEEP
24576:OGtlqe7zwYT8k5EsI7woz2ECwI1jCYjcBZz8Z:OGtlqc4HfwozgwI1+QcBZY
Score
6/10
Malware Config
Signatures
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fastcopy 5.4.3\FastCopy64\FastCopy.exe"C:\Users\Admin\AppData\Local\Temp\Fastcopy 5.4.3\FastCopy64\FastCopy.exe"1⤵
- Checks whether UAC is enabled
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow