Analysis
-
max time kernel
194s -
max time network
166s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
31-12-2023 03:25
General
-
Target
264df1025e704fa5453d586c3f812450.exe
-
Size
4.7MB
-
MD5
264df1025e704fa5453d586c3f812450
-
SHA1
1b9aa181a95f16154230a8335ee6f3c66819720a
-
SHA256
bf527c0e5bdf9613552606dfb9a9ba950ad02b236b48e511e42250d5d3efb08d
-
SHA512
bd651bb3364fbed330d06d62dfd6d4ea58f091f66ff24a53592fb4e0912c87c0703cdcce32fccc4061ef85fb8c4c17f2009174641819929e8da620955c71b203
-
SSDEEP
98304:vqfr8qjV5REqFsCwv6mfin14F4AMbogmZMznOWE1tDxxnqv:igqjvwibF92xF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\264df1025e704fa5453d586c3f812450.exe"C:\Users\Admin\AppData\Local\Temp\264df1025e704fa5453d586c3f812450.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx