Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30/12/2023, 04:44
General
-
Target
0ee1d2a5207bd67aff65e8474b762dba.exe
-
Size
984KB
-
MD5
0ee1d2a5207bd67aff65e8474b762dba
-
SHA1
0f11f7510926610755d03cde0d5b1733e11b6f17
-
SHA256
46c9b49269894c3c6de084151f943b82fa5247dd4510b358fef8dc95ca06637e
-
SHA512
19f13895431a8febaf0ff7e61c2eb2fd42c5b0ffb193adc6532ccdb72bf423b115a3e1ef706fa9cbade70c501a52adb2896df6feab1beb689175683cffc949ef
-
SSDEEP
12288:bzqur6NBeD3h/N1jpZNi9R+swevu2BG4FiMIYkk22kBkmMkkEkkCfs6k05kqiXQ6:bzquu/ANtN8TFiMIYMgQckW6
Score
1/10
Malware Config
Signatures
-
Script User-Agent 2 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ee1d2a5207bd67aff65e8474b762dba.exe"C:\Users\Admin\AppData\Local\Temp\0ee1d2a5207bd67aff65e8474b762dba.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx