Analysis
-
max time kernel
117s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-12-2023 19:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
020799e8d28f329004244365fa34e608.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
020799e8d28f329004244365fa34e608.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
020799e8d28f329004244365fa34e608.exe
-
Size
286KB
-
MD5
020799e8d28f329004244365fa34e608
-
SHA1
b2c5900d816bbec9f00538a48ecafdeef8de6732
-
SHA256
48243b5db2272bd8e638634f1b64467e4a84d53fc7472f0526bedc7678c76ebf
-
SHA512
8b7b17577d65cef4d39142fa02a9cafcefcffa2a3e574637fc4e5a62962f101ee62d81fe52662cc1ddeadcf4e795374154e0a2b8fd554ab87aa074ff53147585
-
SSDEEP
6144:s0AhvaJg2ZxNIp8RPkjAP3OniDNI0V0U:Waq2dIiijPc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3008 020799e8d28f329004244365fa34e608.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3008 020799e8d28f329004244365fa34e608.exe