Analysis
-
max time kernel
142s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
01/01/2024, 17:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d66b5b10a397c9fff177b5da1452f36.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d66b5b10a397c9fff177b5da1452f36.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
3d66b5b10a397c9fff177b5da1452f36.exe
-
Size
40KB
-
MD5
3d66b5b10a397c9fff177b5da1452f36
-
SHA1
57bad42ea593ea4b2d95a773b77c5cc5223f2016
-
SHA256
20d9b339e8b33819e682eb5ee4d18e7af0dc223d856f627a0c43566b42dfd3ac
-
SHA512
181e86e5f7483351c516eaea16f624c7855595b83fd81eb6c3e983b5fcfd8d16447b38dae228a2a1617c1894a8fac7652c405e22eefe6e7bab668c03df11ce2c
-
SSDEEP
768:zPZ9ulwgJbyhuFx6Ohn+GM5r9lj8NaB+Rjk/sWz0T2KVeO+/cGG9LjT/3U2:bZ8J2Yz7Mp9CNWxtIT2Kx+Et/3U2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 368 3d66b5b10a397c9fff177b5da1452f36.exe Token: SeShutdownPrivilege 368 3d66b5b10a397c9fff177b5da1452f36.exe -
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 368 3d66b5b10a397c9fff177b5da1452f36.exe 368 3d66b5b10a397c9fff177b5da1452f36.exe 368 3d66b5b10a397c9fff177b5da1452f36.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 368 3d66b5b10a397c9fff177b5da1452f36.exe 368 3d66b5b10a397c9fff177b5da1452f36.exe 368 3d66b5b10a397c9fff177b5da1452f36.exe