Analysis
-
max time kernel
143s -
max time network
69s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01-01-2024 10:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c365e297c9d5530d8b60b077ea2e8fc.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c365e297c9d5530d8b60b077ea2e8fc.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1c365e297c9d5530d8b60b077ea2e8fc.exe
-
Size
56KB
-
MD5
1c365e297c9d5530d8b60b077ea2e8fc
-
SHA1
dfb4f2a95b728cb3529a98d3d66b8ba8b1daaa9b
-
SHA256
36d6504afc681749a0b110fb6225697da11e174413c62e462ce9068a54d34f20
-
SHA512
1f6883542ddcfa7b4806d4badc629eab4903e8ddcf6dc8221dd966837b77669adac39da85e49b2f5dd06a8cda0353cedcbd817715d3aaf414f46499dde7f0370
-
SSDEEP
768:JDpp8ThXie7M5cz7OZOHPrhytNFLdVo/MV0ebugIovG63bpj:TiXh7M0qZgKaVXg3hbd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3528 1c365e297c9d5530d8b60b077ea2e8fc.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3528 1c365e297c9d5530d8b60b077ea2e8fc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3528 1c365e297c9d5530d8b60b077ea2e8fc.exe